Description
The Sophos XGS 128 (Gen 2) is a high-performance desktop firewall built for the next generation of business networking. Featuring a redesigned Xstream Architecture, it delivers enterprise-grade security at multi-gigabit speeds. This appliance is the successor to the popular XGS 126, offering vastly superior processing power and modern connectivity.
-
Modern SMBs: Ideal for offices with 30–75 users that require high-speed fiber internet support.
-
Tech-Forward Branch Offices: Perfect for locations using Wi-Fi 6/6E and 2.5G switches that need a firewall that won’t bottleneck their LAN.
-
Security-Conscious Organizations: Businesses that need to perform deep packet inspection (DPI) on encrypted TLS 1.3 traffic without sacrificing network speed.
Key Features
-
Ultra-Fast 2.5 GbE Connectivity: Equipped with 9 x 2.5 GbE copper ports, providing 2.5x the speed of standard Gigabit firewalls for all internal and external connections.
-
Industry-Leading Throughput: Delivers up to 19.1 Gbps firewall throughput—a massive upgrade that ensures future-proof performance.
-
Gen 2 Xstream Architecture: A dedicated Flow Processor accelerates trusted SaaS, SD-WAN, and cloud traffic, while the main CPU handles deep security scanning.
-
Optional 5G & Redundancy: Features an expansion slot for the Gen 2 5G module and a dedicated connector for an optional second power supply for maximum uptime.
-
Energy-Efficient & Quiet: Optimized thermal design reduces power consumption and operates with minimal noise, making it perfect for office desks.
Technical Specifications
| Feature | Specification |
| Firewall Throughput | 19,100 Mbps (19.1 Gbps) |
| Threat Protection | 4,000 Mbps (4.0 Gbps) |
| IPS Throughput | 4,650 Mbps |
| IPsec VPN Throughput | 15,050 Mbps |
| Ethernet Interfaces | 9 x 2.5 GbE Copper |
| Fiber Interfaces | 1 x SFP Fiber |
| Expansion Slots | 1 (Supports Optional Gen 2 5G Module) |
| Storage | 64 GB UFS 2.1 SSD |
| Redundant Power | Supported (Optional 2nd PSU sold separately) |
While previous generations struggled with the overhead of modern encrypted web traffic, the Gen 2 hardware handles TLS 1.3 inspection at nearly 1.5 Gbps. It offers the best price-per-protected-Mbps in the desktop range, making it the smartest investment for businesses that want a firewall to last the next 5+ years.

Reviews
There are no reviews yet.