Description
Sophos SG 125w Wireless Firewall

The Sophos SG 125w is a wireless network security appliance designed to combine firewall protection, VPN connectivity, intrusion prevention, antivirus proxy functionality, and wireless networking in a desktop platform.
The appliance delivers up to 3.1 Gbps firewall throughput, 500 Mbps VPN throughput, and 750 Mbps IPS throughput. It also provides eight Gigabit Ethernet copper ports and integrated 802.11a/b/g/n/ac wireless connectivity.
Wireless Connectivity
The SG 125w differs from the standard SG 125 through its integrated wireless capability. It supports 802.11a/b/g/n/ac on the 2.4 GHz and 5 GHz bands, with three external antennas and 3 x 3:3 MIMO.
This configuration allows the appliance to support wired and wireless networking from a single security platform.
Wired Connectivity
The SG 125w provides eight fixed Gigabit Ethernet copper ports for local network connectivity. It also includes a Gigabit Ethernet SFP interface for supported optical or compatible SFP connectivity.
Expansion and Installation
The appliance includes an expansion bay for compatible modules. Sophos documentation identifies supported connectivity options for the SG platform, while SFP transceivers are available separately where required.
A rackmount kit is also available separately for installations that require rack integration.
Legacy Platform Consideration
The SG 125w is part of Sophos’ older SG Series hardware portfolio. Sophos’ published migration guidance maps the SG 125(w) to the XGS 128(w) as its equivalent migration platform. Organizations considering a new purchase should therefore verify product availability, lifecycle status, licensing, software support, and migration options before selecting the SG 125w.
Selection Guide
For Wireless Networking
Choose the SG 125w when integrated wireless networking is required in addition to firewall, VPN, and IPS functionality.
For Wired Connectivity
The SG 125w provides eight Gigabit Ethernet copper ports for wired network connections.
For Fiber Connectivity
Use the Gigabit SFP interface with a compatible Sophos-supported transceiver when fiber connectivity is required. Verify the appropriate transceiver before installation.
For Rack Installation
A rackmount kit is available separately. Confirm the correct mounting accessory and appliance revision before ordering.
For Expansion
Check the exact SG 125w revision and supported hardware documentation before selecting an expansion module.
Always Verify
Because the SG 125w is a legacy platform, verify current availability, software support, licensing, hardware revision, and migration requirements before purchasing or deploying the appliance. Sophos identifies the XGS 128w as the migration equivalent for the SG 125(w).
Installation Notes
Place the SG 125w on a stable surface with adequate airflow around the appliance. Connect the required network interfaces, power supply, and external wireless antennas before configuring the appliance.
For wireless deployment, position the external antennas appropriately for the intended coverage area. The SG 125w uses three external antennas for its integrated wireless interface.
When using the SFP interface, install a compatible transceiver and use the appropriate fiber or copper connection for the selected module.
If rack installation is required, use the appropriate Sophos rackmount accessory rather than an unsupported mounting method. The rackmount kit is sold separately.
Best Practices
- Verify the exact SG 125w hardware revision before deployment.
- Confirm current Sophos software and licensing support.
- Check SFP compatibility before installing a transceiver.
- Position wireless antennas according to the intended coverage requirements.
- Maintain adequate airflow around the appliance.
- Document wired and wireless interfaces during installation.
- Use supported accessories and compatible mounting hardware.
- Review Sophos migration guidance before selecting the appliance for a new deployment.
- Consider the XGS 128w migration path where a current-generation replacement is required.
Benefits for IT Teams
The Sophos SG 125w combines several network security and connectivity functions within a single appliance. Its eight Gigabit Ethernet ports, integrated wireless interface, SFP connectivity, VPN capability, and IPS functionality can simplify infrastructure requirements in suitable deployments.
For IT teams managing existing SG Series environments, maintaining a consistent appliance platform can also simplify replacement and configuration processes.
However, because the SG Series is a legacy platform, IT teams should include lifecycle and migration planning when evaluating the SG 125w. Sophos currently identifies the XGS 128w as the corresponding migration path for the SG 125(w).
Main Benefits
Integrated Wireless Networking
The SG 125w combines firewall functionality with 802.11a/b/g/n/ac wireless connectivity.
Benefit: Reduce the need for separate wireless security infrastructure in suitable deployments.
High Firewall Throughput
With up to 3.1 Gbps firewall throughput, the appliance provides substantial traffic-processing capability for its desktop form factor.
Benefit: Support demanding network traffic within supported deployment environments.
Multiple Gigabit Interfaces
Eight Gigabit Ethernet copper ports provide direct wired connectivity.
Benefit: Connect multiple local network segments and devices without immediately requiring additional interface hardware.
VPN Connectivity
The SG 125w supports up to 500 Mbps VPN throughput.
Benefit: Support secure encrypted network connections for appropriate business deployments.
Wireless Performance
Three external antennas and 3 x 3:3 MIMO support the integrated 802.11ac wireless interface.
Benefit: Provide wireless connectivity across supported 2.4 GHz and 5 GHz networks.
Flexible Deployment
The desktop appliance can be deployed on a suitable surface or integrated into a rack using an available rackmount kit.
Benefit: Adapt installation to branch-office, office, and rack-based infrastructure requirements.
Typical Use Cases
1. Small Business Network Security
The SG 125w can be deployed as a centralized security appliance for small business networks requiring firewall, VPN, IPS, and wireless capabilities.
2. Branch Office Security
Its desktop form factor and integrated wireless functionality make the SG 125w suitable for branch-office environments where space and infrastructure requirements need to be considered.
3. Wireless Network Security
The integrated 802.11a/b/g/n/ac interface can provide wireless connectivity alongside the appliance’s network security functions.
4. Wired and Wireless Network Integration
Eight Gigabit Ethernet ports combined with integrated Wi-Fi allow wired and wireless infrastructure to be managed through a common security appliance.
5. VPN Connectivity
Organizations requiring secure remote or site-to-site connectivity can use the SG 125w’s VPN capabilities within supported Sophos deployments.
6. Rack-Based Deployment
Although designed as a desktop appliance, the SG 125w can be installed in a rack using the appropriate rackmount kit, subject to availability and compatibility.
Who Should Buy Sophos SG 125w?
The Sophos SG 125w is primarily relevant to organizations that already operate or maintain Sophos SG Series infrastructure and require a compatible wireless security appliance.
It may also be considered for specific legacy deployments where the hardware, licensing, software version, and support requirements have been verified.
For new network security deployments, buyers should compare the SG 125w with Sophos’ current-generation XGS platform and review the recommended migration path before making a purchasing decision. Sophos maps the SG 125(w) to the XGS 128(w).
Related Categories
Explore related Sophos products and accessories, including:
- Sophos Firewalls
- Sophos XGS Series
- Sophos XGS 128w
- Sophos SG Series
- Sophos Rackmounts
- Sophos SFP Transceivers
- Sophos Firewall Accessories
- Sophos Wireless Products
Frequently Asked Questions
What is the Sophos SG 125w?
The Sophos SG 125w is a desktop wireless network security appliance from the SG Series. It combines firewall, VPN, IPS, antivirus proxy, wired Ethernet, and 802.11a/b/g/n/ac wireless capabilities.
What is the firewall throughput of the SG 125w?
The SG 125w provides up to 3.1 Gbps firewall throughput. Sophos documentation also lists 500 Mbps VPN throughput and 750 Mbps IPS throughput.
Does the Sophos SG 125w have built-in Wi-Fi?
Yes. The SG 125w includes integrated 802.11a/b/g/n/ac wireless connectivity across 2.4 GHz and 5 GHz. It uses three external antennas and 3 x 3:3 MIMO.
How many Ethernet ports does the SG 125w have?
The SG 125w provides eight Gigabit Ethernet copper ports. Sophos documentation also lists a Gigabit Ethernet SFP interface.
Does the SG 125w support VPN?
Yes. The SG 125w supports VPN functionality with a listed VPN throughput of up to 500 Mbps.
Can the SG 125w be rack mounted?
Yes. A rackmount kit is available separately for the SG 125w platform. Confirm accessory compatibility before installation.
Is the Sophos SG 125w a current-generation firewall?
No. The SG 125w belongs to the legacy SG Series. Sophos’ migration guidance identifies the XGS 128w as the equivalent migration path for the SG 125(w). Buyers should verify current support, licensing, availability, and lifecycle information before purchasing.
What is the difference between SG 125 and SG 125w?
The SG 125w includes integrated wireless networking, while the standard SG 125 does not have the integrated wireless capability indicated by the “w” model designation.
What wireless standard does the SG 125w support?
The SG 125w supports 802.11a/b/g/n/ac wireless on the 2.4 GHz and 5 GHz bands.
What is the recommended replacement for the SG 125w?
Sophos’ migration guidance maps the SG 125(w) to the XGS 128(w). Confirm the appropriate migration, licensing, and deployment requirements for the specific environment.


