Sophos XGS 128w

Description

Sophos XGS 128w

The Sophos XGS 128w is a second-generation desktop firewall designed for SMB, branch-office, and distributed-edge environments that require strong security performance together with integrated wireless connectivity. It combines advanced Sophos Firewall capabilities with high-speed 2.5 Gigabit Ethernet, SFP connectivity, Wi-Fi 6, and optional 5G expansion.

Security Performance

The XGS 128w delivers up to 19.1 Gbps firewall throughput, 14.5 Gbps firewall IMIX, 4.65 Gbps IPS throughput, 4 Gbps threat protection throughput, and 15.05 Gbps IPsec VPN throughput. TLS inspection performance is rated up to 1.45 Gbps.

These performance levels make the appliance suitable for organizations that need to inspect and secure significant network traffic while supporting encrypted connections, VPNs, intrusion prevention, and other firewall services.

Wired Connectivity

The appliance provides 9 x 2.5 GE copper ports and 1 x SFP fiber port. This combination allows organizations to connect modern multi-gigabit network infrastructure while retaining an option for fiber-based connectivity.

Integrated Wireless

The XGS 128w differentiates itself from the standard XGS 128 through integrated wireless capability. It includes Wi-Fi 6, 2×2:2 MIMO, two external antennas, and concurrent 2.4 GHz and 5 GHz operation.

This makes it particularly useful for smaller offices and branch locations where integrated wireless connectivity can simplify the network design.

Optional 5G Connectivity

The appliance includes one expansion slot that supports the optional Gen.2 5G module. Sophos lists the module for XGS 118/118w, XGS 128/128w, and XGS 138/138w. It can be used for redundant cellular connectivity, SD-WAN failover, or 5G fixed wireless access.

Physical Deployment

The XGS 128w measures 320 x 44 x 212 mm and weighs approximately 2.4 kg unpacked, with the w-model being minimally heavier. Sophos lists a rackmount kit as an accessory that can be ordered separately.

Power and Availability

The XGS 128w uses an external auto-ranging AC-DC power supply rated at 65W. A second redundant power supply is available as an option, providing an additional availability choice for business deployments.

Selection Guide

For SMB or Branch Firewall Deployment

Choose the XGS 128w when the deployment requires strong firewall performance, multiple 2.5 GE interfaces, integrated Wi-Fi 6, and optional 5G connectivity.

For Integrated Wireless

Select the XGS 128w instead of the non-wireless XGS 128 when built-in Wi-Fi 6 is an important part of the deployment.

For High-Speed LAN Connectivity

The nine 2.5 GE copper ports are suited to modern multi-gigabit switching environments.

For Fiber Connectivity

Use the fixed SFP port with an appropriate compatible transceiver. Transceivers are sold separately.

For 5G Connectivity

Confirm the requirement for the optional Gen.2 5G module. Sophos specifically lists XGS 128/128w as compatible with the Gen.2 module.

For Rack Installation

A rackmount kit is available separately for the XGS 128w. Confirm the exact compatible rackmount accessory before ordering.

Always Verify

Cross-check the current Sophos product documentation, hardware guide, accessory compatibility matrix, and regional availability before purchasing optional modules or accessories.

Installation Notes

• The XGS 128w can be deployed as a desktop appliance or installed using a compatible rackmount kit.
• For wired connectivity, connect the 2.5 GE Ethernet ports to the appropriate network equipment and use the SFP port with a compatible transceiver where fiber connectivity is required.
• The Wi-Fi 6 model uses two external antennas. Ensure the antennas are properly connected and positioned for the intended wireless environment.
• The optional 5G module is not hot-swappable. Sophos states that the firewall must be powered off before installing the module and then powered on again after installation.
• Follow the Sophos hardware installation instructions and applicable product documentation for rackmounting, modules, antennas, power connections, and network cabling.

Best Practices

• Use the XGS 128w in an environment appropriate for its operating specifications and maintain adequate ventilation around the appliance.
• Use compatible Sophos-listed transceivers and accessories for production deployments.
• Position the two Wi-Fi antennas appropriately and consider the physical environment when planning wireless coverage.
• If using the optional 5G module, verify cellular coverage, SIM requirements, regional compatibility, and the intended failover or WAN configuration.
• For rack deployments, use the appropriate model-specific rackmount kit rather than a generic shelf.
• Document Ethernet, SFP, wireless, and WAN connections for easier troubleshooting and maintenance.
• Keep redundant connectivity and power options in mind for business-critical deployments.

Benefits for IT Teams

• Simplified deployment of firewall, wired networking, and Wi-Fi in one appliance.
• High-speed 2.5 GE connectivity for modern LAN environments.
• Integrated Wi-Fi 6 for suitable branch and SMB deployments.
• Optional 5G connectivity for WAN redundancy and alternative internet access.
• Optional redundant power for improved availability.
• Rackmount support for standardized infrastructure deployments.
• Clear Sophos ecosystem and management experience.

Main Benefits

High-Speed Wired Connectivity

The XGS 128w provides nine 2.5 Gigabit Ethernet ports.

Benefit: Connect high-speed switches, servers, access points, and other network equipment without limiting them to standard Gigabit Ethernet.

Integrated Wi-Fi 6

Built-in Wi-Fi 6 supports concurrent 2.4 GHz and 5 GHz wireless operation.

Benefit: Provide secure local wireless connectivity without automatically requiring a separate wireless gateway.

Advanced Security Performance

With up to 4.65 Gbps IPS and 4 Gbps threat protection throughput, the platform is designed for security-intensive traffic inspection.

Benefit: Maintain strong protection while supporting demanding network workloads.

Flexible WAN Options

The XGS 128w supports fixed Ethernet and SFP connectivity, with an optional Gen.2 5G module.

Benefit: Adapt WAN connectivity to primary, backup, or fixed-wireless deployment requirements.

VPN and Encrypted Traffic Performance

The appliance provides up to 15.05 Gbps IPsec VPN throughput and 1.45 Gbps TLS inspection throughput.

Benefit: Support secure remote connectivity and encrypted traffic inspection at business-network scale.

Deployment Flexibility

The XGS 128w can be used as a desktop appliance or installed using an available rackmount kit.

Benefit: Fit the firewall into offices, branch locations, server rooms, and standardized rack deployments.

Typical Use Cases

1. SMB Network Security

Deploy the XGS 128w as the central security gateway for small and medium-sized business networks.

2. Branch Office Firewall

Use the appliance at distributed branch locations that require firewall security, VPN connectivity, high-speed Ethernet, and integrated Wi-Fi.

3. Wireless-Enabled Offices

The integrated Wi-Fi 6 capability makes the XGS 128w suitable for smaller offices where wired and wireless network security need to be consolidated.

4. 5G Backup Connectivity

Add the optional Gen.2 5G module to provide cellular connectivity for redundancy, SD-WAN failover, or other WAN requirements.

5. Fiber Uplinks

Use the SFP port with a compatible transceiver where fiber connectivity is required.

6. High-Speed LAN Deployments

Use the nine 2.5 GE copper ports to connect modern switches, wireless infrastructure, servers, and other high-bandwidth devices.

Who Should Buy Sophos XGS 128w?

The Sophos XGS 128w is suited to SMBs, branch offices, distributed organizations, retail locations, professional offices, and other environments that need a high-performance next-generation firewall with integrated Wi-Fi 6.

It is particularly appropriate for organizations that want:

• High-speed 2.5 GE wired connectivity
  • Integrated Wi-Fi 6
  • Advanced firewall and threat protection
  • Strong IPsec VPN performance
  • Optional 5G WAN connectivity
  • SFP fiber connectivity
  • Optional redundant power
  • Desktop or rackmount deployment flexibility

Related Categories

Explore related pages for:

• Sophos Firewalls
  • Sophos XGS Series
  • Sophos XGS 128
  • Sophos XGS 118w
  • Sophos XGS 108w
  • Sophos Rackmounts
  • Sophos SFP and SFP+ Transceivers
  • Sophos 5G Module
  • Sophos Wi-Fi Solutions
  • Sophos Firewall Accessories

Frequently Asked Questions

What is the Sophos XGS 128w?

The Sophos XGS 128w is a second-generation desktop next-generation firewall with integrated Wi-Fi 6, 9 x 2.5 GE copper ports, 1 x SFP fiber port, one expansion slot, and optional 5G connectivity.

What is the firewall throughput of the Sophos XGS 128w?

The XGS 128w provides up to 19.1 Gbps firewall throughput and up to 14.5 Gbps firewall IMIX throughput under Sophos’ stated test methodology.

How many Ethernet ports does the XGS 128w have?

The appliance has 9 x 2.5 GE copper Ethernet ports and 1 x SFP fiber port.

Does the Sophos XGS 128w have Wi-Fi?

Yes. The XGS 128w includes integrated Wi-Fi 6 (802.11ax) with 2×2:2 MIMO, two external antennas, and concurrent 2.4 GHz and 5 GHz operation.

Does the XGS 128w support 5G?

Yes. The XGS 128w has one expansion slot supporting the optional Sophos 5G Module Gen.2. Sophos lists the XGS 128/128w among the compatible Gen.2 platforms.

Can the XGS 128w be rack mounted?

Yes. Sophos lists a rackmount kit available separately for the XGS 128w.

Does the XGS 128w support redundant power?

Yes. An optional second power supply is available for the XGS 128w, providing an additional power redundancy option.

What is the IPsec VPN throughput of the XGS 128w?

Sophos rates the XGS 128w at up to 15.05 Gbps IPsec VPN throughput.

What is the threat protection throughput?

The XGS 128w provides up to 4 Gbps threat protection throughput according to Sophos’ published specifications.

What is the size of the Sophos XGS 128w?

The XGS 128w measures approximately 320 x 44 x 212 mm (width x height x depth). Its listed unpacked weight is approximately 2.4 kg, with the wireless model being minimally heavier.

Is the 5G module hot-swappable?

No. Sophos states that the firewall must be powered off before installing the 5G wireless module.

Is the XGS 128w suitable for a branch office?

Yes. The XGS 128w is part of Sophos’ second-generation desktop XGS range for SMB and branch-office deployments. Its combination of firewall security, 2.5 GE ports, Wi-Fi 6, SFP connectivity, and optional 5G makes it suitable for many distributed network environments.