Network Security & Firewalls

Powerful Protection and Performance

Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection.

Powerful Protection and Performance

The Sophos Firewall Xstream architecture is engineered to deliver extreme levels of visibility, protection, and performance to help address some of the greatest challenges facing network administrators today.

TLS 1.3 Inspection

Approximately 99% of web traffic is now encrypted, making it invisible to most firewalls. Many organizations find themselves powerless to protect their networks from an increasing amount of ransomware, threats and potentially unwanted apps that are exploiting this blind spot. Sophos Firewall makes efficient and effective TLS inspection possible without compromising on performance. Our XGS Series appliances with integrated Xstream Flow Processors put TLS traffic on the FastPath for accelerated inspection. Our high-performance TLS inspection engine supports TLS 1.3 without downgrading, the latest cipher suites for maximum compatibility, and enhanced visibility into encrypted traffic flows right on the dashboard.

Deep Packet Inspection

We believe you should never have to decide between security and performance. Sophos Firewall includes a high-speed deep packet inspection (DPI) engine to scan your traffic for threats without a proxy slowing down the process. The firewall stack can completely offload the processing to the DPI engine, significantly reducing latency and improving overall efficiency. Sophos Firewall blocks the latest ransomware and breaches with high-performance streaming DPI including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

Application Acceleration

A significant portion of your network traffic is trusted business application traffic destined for branch offices, remote users, or cloud application servers. As such, no additional security scanning for threats or malware is needed, and it can be intelligently directed to the FastPath, reducing latency, optimizing overall performance, and freeing up capacity for traffic that does need deep packet inspection.

Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your policies - putting them on the FastPath through the Xstream Flow Processor.

SD-WAN

Managing application traffic routing over multiple WAN links, and interconnecting a distributed network are essential elements of any SD-WAN solution. Often these tasks are much more challenging than they should be.

Sophos Firewall with Xstream SD-WAN provides a powerful, integrated SD-WAN solution, with performance-based link selection and routing, load balancing, zero-impact transitions between links in the event of a disruption, central cloud-managed orchestration, and Xstream FastPath acceleration of VPN tunnel traffic. Sophos Firewall with Xstream SD-WAN is one of the best, most flexible SD-WAN solutions available in any firewall today.

XGS Series | SMB and branch office: 2nd Gen XGS desktop models

Unlock supreme desktop performance, improved energy efficiency, and a wealth of new high-speed connectivity options.

Sophos second-generation XGS Series desktop appliances deliver double the performance of our first-generation models while cutting power consumption in half. All these desktop firewalls include 2.5 GE interfaces, allowing traffic to flow freely and without bottlenecks, from your firewall to your 2.5 GE switch to your Wi-Fi 6 access point.

Customers with noise-sensitive environments such as healthcare, education, and retail will love the whisper-quiet operation of the fanless XGS 88 and XGS 108 models. Using the expansion bay, an optional 5G module adds either redundant cellular connectivity or cost-effective 5G fixed wireless access (FWA).

The XGS 88 to XGS 128 models feature a streamlined, single-CPU architecture that utilizes virtual FastPath technology for traffic acceleration (in combination with Sophos Firewall OS v21 and higher). As our gateway model to the distributed edge, the XGS 138 boasts a dedicated Xstream Flow processor for hardware acceleration and two 10 GE SFP+ interfaces for high-speed fiber connectivity. All models except the XGS 138 are optionally available with built-in Wi-Fi.

XGS Series | SMB and branch office: 2nd Gen XGS desktop models

Unlock supreme desktop performance, improved energy efficiency, and a wealth of new high-speed connectivity options.

Sophos second-generation XGS Series desktop appliances deliver double the performance of our first-generation models while cutting power consumption in half. All these desktop firewalls include 2.5 GE interfaces, allowing traffic to flow freely and without bottlenecks, from your firewall to your 2.5 GE switch to your Wi-Fi 6 access point.

Customers with noise-sensitive environments such as healthcare, education, and retail will love the whisper-quiet operation of the fanless XGS 88 and XGS 108 models. Using the expansion bay, an optional 5G module adds either redundant cellular connectivity or cost-effective 5G fixed wireless access (FWA).

The XGS 88 to XGS 128 models feature a streamlined, single-CPU architecture that utilizes virtual FastPath technology for traffic acceleration (in combination with Sophos Firewall OS v21 and higher). As our gateway model to the distributed edge, the XGS 138 boasts a dedicated Xstream Flow processor for hardware acceleration and two 10 GE SFP+ interfaces for high-speed fiber connectivity. All models except the XGS 138 are optionally available with built-in Wi-Fi.

XGS Series | SMB and branch office: 2nd Gen XGS desktop models

Unlock supreme desktop performance, improved energy efficiency, and a wealth of new high-speed connectivity options.

Sophos second-generation XGS Series desktop appliances deliver double the performance of our first-generation models while cutting power consumption in half. All these desktop firewalls include 2.5 GE interfaces, allowing traffic to flow freely and without bottlenecks, from your firewall to your 2.5 GE switch to your Wi-Fi 6 access point.

Customers with noise-sensitive environments such as healthcare, education, and retail will love the whisper-quiet operation of the fanless XGS 88 and XGS 108 models. Using the expansion bay, an optional 5G module adds either redundant cellular connectivity or cost-effective 5G fixed wireless access (FWA).

The XGS 88 to XGS 128 models feature a streamlined, single-CPU architecture that utilizes virtual FastPath technology for traffic acceleration (in combination with Sophos Firewall OS v21 and higher). As our gateway model to the distributed edge, the XGS 138 boasts a dedicated Xstream Flow processor for hardware acceleration and two 10 GE SFP+ interfaces for high-speed fiber connectivity. All models except the XGS 138 are optionally available with built-in Wi-Fi.

XGS Series | SMB and branch office: 2nd Gen XGS desktop models

Unlock supreme desktop performance, improved energy efficiency, and a wealth of new high-speed connectivity options.

Sophos second-generation XGS Series desktop appliances deliver double the performance of our first-generation models while cutting power consumption in half. All these desktop firewalls include 2.5 GE interfaces, allowing traffic to flow freely and without bottlenecks, from your firewall to your 2.5 GE switch to your Wi-Fi 6 access point.

Customers with noise-sensitive environments such as healthcare, education, and retail will love the whisper-quiet operation of the fanless XGS 88 and XGS 108 models. Using the expansion bay, an optional 5G module adds either redundant cellular connectivity or cost-effective 5G fixed wireless access (FWA).

The XGS 88 to XGS 128 models feature a streamlined, single-CPU architecture that utilizes virtual FastPath technology for traffic acceleration (in combination with Sophos Firewall OS v21 and higher). As our gateway model to the distributed edge, the XGS 138 boasts a dedicated Xstream Flow processor for hardware acceleration and two 10 GE SFP+ interfaces for high-speed fiber connectivity. All models except the XGS 138 are optionally available with built-in Wi-Fi.