What it is
Compact next-generation firewall appliances designed for high-speed desktop and branch deployments.
Category Overview
Modern Edge Security Without the Rackmount Footprint
Who it's for
SMBs, branch offices, retail locations, distributed teams, and regional sites.
Main use cases
Network protection, secure remote access, SD-WAN, application control, encrypted traffic inspection, and secure connectivity.
In the ecosystem
Integrates with Sophos Central, Sophos Endpoint, Sophos MDR, Sophos Switch, and Sophos Wireless.
Key Features
High-performance protection for today's distributed networks
The 2nd Gen XGS desktop range combines Sophos Firewall security capabilities with refreshed hardware architecture, high-speed interfaces, and flexible connectivity options.
Advanced Threat Protection
Detect and block malware, ransomware, exploits, and other network-based threats using Sophos Firewall protection technologies.
TLS Inspection
Inspect encrypted traffic to identify threats hidden inside HTTPS connections while applying security policies.
Application Control
Identify applications and enforce granular network access and usage policies.
Web Protection
Apply URL, category, content, and safe-search policies to control web access.
IPS & IDS
Detect suspicious traffic patterns, exploits, and intrusion attempts at the network edge.
VPN Connectivity
Support secure site-to-site and remote connectivity using IPsec VPN and other Sophos Firewall capabilities.
SD-WAN
Use application-aware routing and multiple WAN connections to improve connectivity and resilience.
2.5 GE Connectivity
Provide multi-gigabit wired connectivity for modern switches, wireless access points, and high-speed networks.
Cloud Management
Centralize administration, monitoring, reporting, and security operations through Sophos Central.
Product Range
Available Models
Sophos XGS 88
Sophos XGS 88 is a 2nd Gen desktop firewall designed to provide high-performance network security for small and...
View Product
Sophos XGS 138
The Sophos XGS 138 is a second-generation desktop next-generation firewall designed for organizations that need high-speed security, 10G...
View Product
Sophos XGS 128w
The Sophos XGS 128w is a second-generation desktop firewall designed for SMBs, branch offices, and distributed network environments...
View Product
Sophos XGS 88w
The Sophos XGS 88w is a second-generation desktop next-generation firewall designed for small and medium-sized businesses, branch offices,...
View Product
Sophos XGS 108
The Sophos XGS 108 is a 2nd-generation desktop next-generation firewall designed for SMBs, branch offices, and distributed business...
View Product
Sophos XGS 128
The Sophos XGS 128 is a second-generation desktop next-generation firewall designed for SMBs, branch offices, and distributed network...
View Product
Sophos XGS 108w
The Sophos XGS 108w is a second-generation XGS Series desktop firewall designed for small and medium-sized businesses, branch...
View Product
Sophos XGS 118
The Sophos XGS 118 is a second-generation desktop next-generation firewall designed for small and medium-sized businesses, branch offices,...
View Product
Sophos XGS 118w
The Sophos XGS 118w is a second-generation desktop firewall designed for SMBs, branch offices, distributed organizations, and network...
View ProductWHY CHOOSE XGS
Built for higher-speed networks and efficient edge security
The 2nd Gen XGS desktop platform is designed around the increasing bandwidth demands of cloud applications, Wi-Fi 6 deployments, encrypted traffic, and distributed work environments.
Performance Efficiency
Higher firewall, IPS, VPN, and threat-protection capacity for bandwidth-intensive business networks.
High-Speed Networking
2.5 GE interfaces provide faster connectivity between the firewall, switches, and wireless infrastructure.
Energy Efficiency
Sophos states that 2nd Gen desktop models can reduce power consumption by up to 50% compared with the previous generation.
Flexible Connectivity
Selected models support expansion bays and the optional Gen.2 5G module for additional WAN resilience.
Wireless Integration
w-models integrate Wi-Fi 6 for environments that want firewall and wireless connectivity in one appliance.
Centralized Operations
Sophos Central enables centralized cloud-based management and visibility across supported Sophos infrastructure.
Sophos Ecosystem
One security platform across network, endpoint, and cloud
Sophos Firewall
Provides perimeter security, traffic inspection, routing, VPN, SD-WAN, and network policy enforcement.
ExploreSophos Central
Centralized cloud platform for managing supported Sophos products and security operations.
ExploreSophos Switch
Provides secure wired network connectivity for users, devices, access points, and IoT systems.
ExploreSophos Wireless
Provides centrally managed wireless access for business environments.
ExploreSophos Endpoint
Protects employee devices with endpoint security and threat detection capabilities.
ExploreSophos MDR
Provides managed threat detection, threat hunting, and incident response services.
ExploreDEPLOYMENT SCENARIOS
Security architecture for different business environments
Compact Security
XGS 88 or XGS 108 provides multi-gigabit connectivity and comprehensive firewall capabilities in a compact appliance.
See Solution
Retail & Distributed Outlets
Centralized firewall management combined with redundant WAN options and secure segmentation for distributed locations.
See Solution
Hybrid & Remote Workplaces
VPN, application controls, web security, and centralized policies protect users working across distributed environments.
See Solution
Growing Regional Offices
XGS 118 or XGS 128 provides additional ports, greater throughput, expansion capabilities, and optional 5G connectivity.
See Solution
High-Density Branch Networks
XGS 128 or XGS 138 can support higher-bandwidth environments requiring stronger inspection and connectivity capacity.
See SolutionIndustries Served
Trusted across sectors
TECHNICAL SPECIFICATIONS
At-a-glance capabilities
The following specifications are based on Sophos’s current published specifications for the 2nd Gen desktop range.
Firewall Throughput
9.9 – 19.1 Gbps
Published firewall throughput across the XGS 88–138 desktop family.
TLS Inspection
600 Mbps – 1.7 Gbps
Published TLS inspection performance varies by model.
IPS Throughput
2 – 5.85 Gbps
Model-dependent intrusion prevention performance.
IPsec VPN
6 – 15.05 Gbps
High-speed encrypted VPN throughput across the range.
Threat Protection
2 – 4.75 Gbps
Published performance with multiple protection services enabled.
Ethernet
2.5 GE
Multi-gigabit copper connectivity across the desktop range.
Wi-Fi
Wi-Fi 6
Available on w-models with concurrent 2.4 GHz and 5 GHz operation.
5G Expansion
Gen.2 5G
Available on XGS 118, XGS 128, and XGS 138.
Management
Sophos Central
Centralized cloud management with local firewall administration options.
Form Factor
Desktop
Compact deployment with optional rackmount accessories.
How to Choose
Pick the right XGS 2nd Gen model for your environment
Small Businesses
Small offices and compact teams
Four 2.5 GE interfaces with a compact form factor. Fanless operation on XGS 88.
XGS 88 / 88w
Growing SMBs
Branches and expanding offices
Additional 2.5 GE interfaces and optional power redundancy on XGS 108.
XGS 108 / 108w
Regional Offices
Higher traffic and connectivity requirements
Nine 2.5 GE interfaces, SFP connectivity, expansion capability, and optional 5G.
XGS 118 / 118w
Mid-Market Networks
Higher-bandwidth offices and distributed sites
Higher firewall and threat-protection capacity with expansion and optional 5G.
XGS 128 / 128w
High-Density Edge
Demanding branch and edge deployments
Dedicated Xstream Flow processor, 10 GE SFP+ interfaces, and PoE connectivity.
XGS 138 / 138w
COMPARISON TABLE
Compare every XGS 2nd Gen Desktop Firewall
| Model | Users | Ports | Throughput | Best For | Redundancy | Modularity | Connectivity |
|---|---|---|---|---|---|---|---|
| Sophos XGS 88 | Up to 25 | 4 × 2.5 GE copper | 9.9 Gbps | Small offices & micro branches | N/A | Fixed architecture | N/A |
| Sophos XGS 88w | Up to 25 | 4 × 2.5 GE copper | 9.9 Gbps | Small offices with integrated Wi-Fi | N/A | Fixed architecture | Integrated Wi-Fi 6, 2×2 MIMO |
| Sophos XGS 108 | Up to 50 | 6 × 2.5 GE copper + 1 × SFP | 12.5 Gbps | Growing SMBs & branch offices | Optional 2nd power supply | Fixed architecture; SFP transceivers | N/A |
| Sophos XGS 108w | Up to 50 | 6 × 2.5 GE copper + 1 × SFP | 12.5 Gbps | SMBs requiring integrated wireless | Optional 2nd power supply | Fixed architecture; SFP transceivers | Integrated Wi-Fi 6, 2×2 MIMO |
| Sophos XGS 118 | Up to 75 | 9 × 2.5 GE copper + 1 × SFP | 15.5 Gbps | Growing regional offices & higher-traffic SMBs | Optional 2nd power supply | 1 expansion bay; optional Gen.2 5G | N/A |
| Sophos XGS 118w | Up to 75 | 9 × 2.5 GE copper + 1 × SFP | 15.5 Gbps | Regional offices with integrated Wi-Fi | Optional 2nd power supply | 1 expansion bay; optional Gen.2 5G | Integrated Wi-Fi 6, 2×2 MIMO |
| Sophos XGS 128 | Up to 100 | 9 × 2.5 GE copper + 1 × SFP | 19.1 Gbps | Mid-market offices & demanding branches | Optional 2nd power supply | 1 expansion bay; optional Gen.2 5G | N/A |
| Sophos XGS 128w | Up to 100 | 9 × 2.5 GE copper + 1 × SFP | 19.1 Gbps | High-speed offices with integrated Wi-Fi | Optional 2nd power supply | 1 expansion bay; optional Gen.2 5G | Integrated Wi-Fi 6, 2×2 MIMO |
WHY BUY VIA NETMATE
Superior hardware needs expert execution. We bridge the gap.
Selecting a Sophos firewall is only one part of building a secure network. Netmate IT helps organizations assess requirements, design the architecture, deploy the appliance, migrate existing infrastructure, and maintain the environment after implementation.
Strategic Discovery
Evaluate bandwidth, users, applications, connectivity, security requirements, and licensing needs to identify an appropriate XGS model.
Architecture Engineering
Develop network topology, VLAN segmentation, routing, WAN design, firewall policies, and HA architecture where applicable.
Precision Rollout
Configure firewall policies, interfaces, VPNs, security services, and management settings using structured deployment procedures.
Frictionless Transition
Plan migration from existing firewalls while minimizing disruption to business-critical connectivity.
Continuous Monitoring
Provide ongoing assistance, troubleshooting, configuration support, and vendor escalation when required.
Team Enablement
Help internal IT teams understand firewall administration, policy management, reporting, and Sophos Central operations.
FREQUENTLY ASKED QUESTIONS
Everything you need to know about Sophos XGS 2nd Gen Desktop Firewalls
What is new about the Sophos XGS 2nd Gen desktop firewalls?
The 2nd Gen desktop series introduces higher performance, 2.5 GE connectivity across the lineup, Wi-Fi 6 on W-models, improved energy efficiency, and optional Gen.2 5G connectivity on selected models. Sophos states that the new generation can deliver up to twice the throughput of comparable Gen.1 models while reducing power consumption by up to 50%.
Which models are included in the Sophos XGS 2nd Gen desktop series?
The current lineup consists of the XGS 88/88w, XGS 108/108w, XGS 118/118w, XGS 128/128w, and XGS 138. The w-models provide integrated Wi-Fi 6, while the XGS 138 is available without a Wi-Fi variant.
What does the "w" mean on models such as XGS 108w?
The w indicates that the firewall includes integrated Wi-Fi 6. Sophos specifies dual-band concurrent 2.4 GHz and 5 GHz wireless operation with 2×2 MIMO on the w-models.
Which XGS 2nd Gen models support the optional 5G module?
The Gen.2 5G module is supported on the XGS 118, XGS 128, and XGS 138. It can be used for redundant cellular connectivity or fixed wireless access, depending on the deployment.
Which model should a small office consider?
The XGS 88 and XGS 108 are positioned toward smaller environments. The XGS 88 provides four 2.5 GE interfaces and up to 9.9 Gbps firewall throughput, while the XGS 108 adds additional interfaces and reaches up to 12.5 Gbps firewall throughput.