Description
Sophos XGS 116w

The Sophos XGS 116w is a next-generation firewall appliance designed for organizations that need network security together with integrated wireless connectivity. It combines Sophos Firewall capabilities with eight Gigabit Ethernet ports, a 1G SFP interface, PoE, an expansion bay, and built-in Wi-Fi 5.
The appliance is part of Sophos’ first-generation XGS desktop firewall family, which uses a high-speed CPU alongside an Xstream Flow processor for hardware acceleration. Sophos positions these desktop models for SMB and branch-office environments.
Security and Performance
The XGS 116w delivers up to 7.7 Gbps firewall throughput, 2.5 Gbps IPS throughput, 2 Gbps NGFW throughput, and 650 Mbps Xstream SSL/TLS inspection throughput according to Sophos’ published specifications.
It also supports up to 4.8 Gbps IPsec VPN throughput, making it suitable for environments requiring secure site-to-site or remote network connectivity.
Wired Connectivity
Eight Gigabit Ethernet ports provide the primary wired interfaces. One of these ports supports 802.3at PoE with up to 30W, while a separate 1G SFP port provides fiber connectivity using a compatible transceiver.
Wireless Connectivity
The integrated wireless functionality is the defining feature of the XGS 116w. It includes Wi-Fi 5/802.11ac, 2×2:2 MIMO, and two external antennas. The wireless radio supports 2.4 GHz and 5 GHz operation.
An optional second Wi-Fi radio module is available for the XGS 116w. Sophos states that this can enable simultaneous 2.4 GHz and 5 GHz operation.
Expansion Options
The XGS 116w includes one expansion slot. Supported options include 3G/4G, 5G, and an additional Wi-Fi module. This provides flexibility for organizations whose connectivity requirements may change over time.
Selection Guide
For Wireless Firewall Deployment
Choose the Sophos XGS 116w when integrated Wi-Fi is required alongside Sophos Firewall security.
For Wired-Only Deployment
If integrated Wi-Fi is not required, the standard XGS 116 provides the corresponding wired platform without the built-in Wi-Fi radio.
For Additional Wireless Capacity
Consider the optional second Wi-Fi module when simultaneous 2.4 GHz and 5 GHz wireless operation is required.
For Cellular Connectivity
The expansion bay supports optional 3G/4G and 5G modules for supported deployments.
For Rack Installation
The dedicated Sophos rackmount kit is compatible with the XGS 116w. Sophos’ installation documentation specifically identifies the rackmount kit for XGS 116(w), 126(w), and 136(w) models.
Always Verify
Check the current Sophos product documentation, hardware revision, module compatibility, and regional availability before purchasing.
Installation Notes
The XGS 116w can be deployed on a desktop, wall, rack, or DIN-rail installation according to Sophos’ hardware documentation. Its dimensions are 320 x 213 x 44 mm, with an unpacked weight of approximately 2.2 kg.
For rack deployment, Sophos provides a dedicated mounting kit specifically compatible with the XGS 116(w), XGS 126(w), and XGS 136(w). The kit includes mounting brackets, adapter trays, sponges, adapter brackets, and mounting screws.
The external power supply supports 100–240 VAC input and provides 150W output. An optional second redundant power supply is also supported.
Optional connectivity modules should be installed according to the relevant Sophos hardware installation instructions.
Best Practices
- Verify the exact XGS 116w hardware revision before ordering optional modules.
- Use compatible Sophos SFP transceivers for the SFP interface.
- Position the external Wi-Fi antennas correctly for the intended wireless coverage.
- Maintain sufficient airflow around the appliance.
- Use the PoE port only with devices within its 30W power limit.
- Keep firmware and Sophos Firewall software updated.
- Use the appropriate rackmount kit for rack deployment.
- Confirm regional availability of cellular modules before purchasing.
- Document installed expansion modules and network connections.
- Verify current Sophos compatibility documentation before adding accessories.
Benefits for IT Teams
The Sophos XGS 116w can simplify network deployment by combining firewall security, wired connectivity, wireless access, PoE, fiber connectivity, and expansion capabilities in one appliance.
For IT teams, this can provide:
- Centralized network security
- Integrated wireless connectivity
- Fewer separate network devices
- Flexible expansion options
- PoE connectivity for supported devices
- Fiber connectivity through SFP
- Optional cellular connectivity
- Rackmount deployment capability
- Simplified branch-office installations
- A consistent Sophos Firewall management environment
Main Benefits
Integrated Network Security and Wi-Fi
The XGS 116w combines firewall protection and wireless connectivity in one appliance.
Benefit: Reduce the number of separate network devices required in branch and small-office deployments.
High-Speed Firewall Performance
With up to 7.7 Gbps firewall throughput, the appliance supports high-speed network traffic while applying security controls.
Benefit: Support demanding business network environments.
Built-In PoE
One Gigabit Ethernet port provides up to 30W of 802.3at PoE.
Benefit: Power compatible access points, IP phones, and cameras without a separate PoE injector.
Flexible Expansion
The expansion slot supports optional connectivity modules, including cellular and additional wireless options.
Benefit: Adapt the firewall to changing connectivity requirements
Fiber Connectivity
The integrated 1G SFP interface supports fiber networking through a compatible transceiver.
Benefit: Connect the firewall to fiber-based network infrastructure where required.
Rack Deployment Option
Sophos provides a dedicated rackmount kit for the XGS 116w and related XGS 116/126/136 models.
Benefit: Integrate the desktop firewall into a standard rack installation.
Typical Use Cases
1. Small Business Network Security
Deploy the XGS 116w as the central firewall for a small business network requiring wired security and integrated wireless connectivity.
2. Branch Office Connectivity
The combination of firewall security, Wi-Fi, PoE, SFP, and optional cellular connectivity makes the appliance suitable for distributed branch environments.
3. Wireless Business Networks
Use the built-in Wi-Fi 5 radio to provide wireless connectivity alongside Sophos Firewall security.
4. IP Camera Deployments
The PoE-enabled Gigabit Ethernet port can supply up to 30W to a compatible IP camera.
5. IP Phone and Access Point Connectivity
The PoE interface can also power compatible IP phones and wireless access points.
6. Remote or Backup Connectivity
Optional 3G/4G or 5G modules can provide additional connectivity options through the appliance’s expansion bay.
7. Rack-Based Firewall Deployment
With the dedicated rackmount kit, the XGS 116w can be integrated into a professional rack environment.
Who Should Buy Sophos XGS 116w?
The Sophos XGS 116w is intended for organizations looking for a desktop firewall with integrated Wi-Fi and flexible wired connectivity.
It can be considered for:
- Small and medium-sized businesses
- Branch offices
- Retail locations
- Distributed organizations
- Professional offices
- Remote business locations
- Organizations using Sophos Firewall
- Businesses requiring integrated Wi-Fi and firewall security
- Deployments requiring PoE connectivity
- Networks requiring optional cellular connectivity
Sophos identifies the first-generation XGS desktop family as suitable for SMB and branch-office environments.
Frequently Asked Questions
What is Sophos XGS 116w?
The Sophos XGS 116w is a desktop next-generation firewall with integrated Wi-Fi 5, eight Gigabit Ethernet ports, one 1G SFP interface, PoE, and an expansion slot.
Does Sophos XGS 116w have built-in Wi-Fi?
Yes. The XGS 116w includes Wi-Fi 5/802.11ac with 2×2:2 MIMO and two external antennas.
What is the firewall throughput of XGS 116w?
Sophos lists firewall throughput of 7,700 Mbps and firewall IMIX throughput of 4,500 Mbps for the XGS 116/116w family.
How many Ethernet ports does XGS 116w have?
The XGS 116w has 8 Gigabit Ethernet copper ports and one 1G SFP interface.
Does XGS 116w support PoE?
Yes. Port 8 supports 802.3at PoE with up to 30W for compatible devices.
Can XGS 116w support a second Wi-Fi module?
Yes. Sophos lists an optional second Wi-Fi 5/802.11ac module for the XGS 116w.
Can I add 4G or 5G connectivity?
Yes. The XGS 116w has one expansion bay that supports optional 3G/4G and 5G connectivity modules.
Does Sophos XGS 116w support rack mounting?
Yes. Sophos provides a dedicated rackmount kit compatible with XGS 116(w), 126(w), and 136(w) models.
What type of Wi-Fi does XGS 116w support?
The XGS 116w supports Wi-Fi 5 / IEEE 802.11a/b/g/n/ac, with 2×2:2 MIMO and two external antennas.
Does XGS 116w have an SFP port?
Yes. It has one 1 Gbps SFP interface. The SFP transceiver is sold separately.
Is Sophos XGS 116w suitable for branch offices?
Sophos positions its first-generation XGS desktop models for SMB and branch-office deployments, and the XGS 116w combines firewall, Wi-Fi, PoE, SFP, and optional cellular connectivity.



Reviews
There are no reviews yet.