Description
Sophos XGS 118
The Sophos XGS 118 is a second-generation desktop firewall designed to provide high-performance network security for SMBs, branch offices, and distributed business environments. It combines multi-gigabit Ethernet connectivity with advanced firewall, IPS, VPN, threat protection, and TLS inspection capabilities in a compact appliance.
Performance Category
With up to 15.5 Gbps firewall throughput, 11 Gbps firewall IMIX, and 3.5 Gbps IPS throughput, the XGS 118 is designed for networks where traffic volumes are increasing and security inspection needs to keep pace. Its 3.95 Gbps NGFW performance and 3.25 Gbps threat protection throughput provide additional capacity for security-heavy deployments.
Connectivity Category
The XGS 118 provides 9 × 2.5GbE copper ports and 1 × SFP fiber port. This combination makes it suitable for modern networks using multi-gigabit switching and wireless infrastructure while still providing an option for fiber connectivity.
Expansion Category
One expansion slot supports the optional Gen.2 5G module, giving organizations the option of adding cellular connectivity without deploying a separate external cellular gateway. Sophos positions 5G as an option for high-speed connectivity, redundancy, and SD-WAN use cases.
Power and Deployment Category
The appliance uses an external 65W auto-ranging AC-DC power supply and supports an optional second power supply for redundancy. Its 320 × 44 × 212 mm dimensions allow flexible deployment, while Sophos lists rackmount, wall, and DIN-rail mounting options.
Why Choose Sophos XGS 118?
The XGS 118 is a strong option for organizations that have outgrown basic firewall appliances and require higher network throughput, multi-gigabit ports, secure VPN connectivity, and flexible WAN options. Its combination of 2.5GbE interfaces, SFP connectivity, optional 5G expansion, and redundant power support provides a practical platform for growing business networks.
15. Selection Guide
For SMB Networks
Choose the XGS 118 when the network requires more than basic Gigabit connectivity and needs multiple 2.5GbE interfaces for switches, servers, access points, or other high-speed devices.
For Branch Offices
Consider the XGS 118 when a branch requires high-speed local connectivity together with site-to-site VPN capabilities and centralized firewall management.
For Multi-Gigabit Networks
The nine 2.5GbE copper ports make the XGS 118 appropriate for deployments where 2.5GbE switching and Wi-Fi infrastructure are being introduced.
For 5G Connectivity
If cellular WAN connectivity, backup Internet, or SD-WAN failover is required, verify compatibility and deployment requirements for the optional Gen.2 5G module.
For Fiber Connectivity
Use the integrated SFP interface when the deployment requires a fiber connection. Select the appropriate compatible SFP transceiver according to the fiber type, distance, and network requirements.
Always Verify
Cross-check the current Sophos hardware documentation, supported transceiver information, expansion-module compatibility, regional availability, and licensing requirements before purchasing.
16. Installation Notes
Place the XGS 118 in a clean, adequately ventilated location with sufficient clearance around the appliance. The device can be installed using suitable desktop, wall, rack, or DIN-rail mounting arrangements.
Connect the 2.5GbE ports to compatible network equipment using appropriate Ethernet cabling and use the SFP interface with a compatible transceiver when fiber connectivity is required.
If installing the optional 5G module or second power supply, follow the applicable Sophos hardware installation instructions. Optional modules should not be installed or removed outside the procedures specified by Sophos.
17. Best Practices
- Plan 2.5GbE port allocation before installation.
- Use compatible Sophos-listed transceivers for fiber connections.
- Keep adequate airflow around the firewall.
- Use the optional second power supply where power resilience is important.
- Consider 5G as a backup or SD-WAN connectivity option where appropriate.
- Document WAN, LAN, SFP, and expansion connections.
- Keep firmware and security subscriptions current.
- Verify hardware and accessory compatibility before ordering.
- Use appropriate rackmount hardware rather than generic mounting solutions.
- Maintain configuration backups for business-critical deployments.
18. Benefits for IT Teams
The Sophos XGS 118 gives IT teams a combination of high-speed connectivity and advanced firewall security in a single compact appliance. Its nine 2.5GbE ports reduce the need for additional media conversion in multi-gigabit environments, while the SFP interface provides a direct option for fiber connectivity.
Optional 5G expansion and power redundancy also give administrators additional deployment flexibility. This can simplify branch-office designs, WAN backup strategies, and network upgrades while keeping the firewall within the Sophos ecosystem.
Main Benefits
Benefit 01: Multi-Gigabit Connectivity
Nine 2.5GbE ports support modern high-speed LAN infrastructure.
Benefit: Reduce interface bottlenecks between the firewall, switches, servers, and wireless networks.
Benefit 02: Strong Security Performance
The XGS 118 provides high firewall, IPS, NGFW, and threat protection throughput.
Benefit: Maintain security inspection without making the firewall a major network bottleneck.
Benefit 03: Flexible WAN Options
The appliance includes SFP connectivity and supports an optional Gen.2 5G module.
Benefit: Adapt WAN connectivity to fiber, Ethernet, cellular backup, or SD-WAN requirements.
Benefit 04: VPN Capacity
Up to 13 Gbps IPsec VPN throughput and 1,500 concurrent IPsec tunnels provide substantial secure connectivity capacity.
Benefit: Support branch-to-branch and other encrypted network connections.
Benefit 05: Power Resilience
An optional second power supply provides a redundancy option.
Benefit: Improve availability in business-critical deployments.
Benefit 06: Deployment Flexibility
The XGS 118 supports multiple physical installation approaches and can be paired with an optional rackmount kit.
Benefit: Integrate the appliance into desktops, network rooms, racks, or other structured installations.
13. Typical Use Cases
- SMB Network Security
Deploy the XGS 118 as the central firewall for small and medium-sized business networks requiring multi-gigabit connectivity and advanced security inspection. - Branch Office Firewall
Use the appliance to secure branch networks while providing high-speed LAN connectivity and VPN connectivity to headquarters or other locations. - Multi-Gigabit Network Protection
Connect 2.5GbE switches, wireless access points, servers, and other high-speed devices directly to the firewall. - Secure Site-to-Site Connectivity
Use IPsec VPN capabilities to establish encrypted connections between offices, data centers, cloud environments, or remote networks. - 5G Backup Connectivity
Install the optional Gen.2 5G module where cellular connectivity is required for WAN backup, failover, or SD-WAN deployments. - Fiber Uplink Deployment
Use the SFP interface for fiber-based network connections where longer-distance or fiber infrastructure is required.
19. Who Should Buy Sophos XGS 118?
The Sophos XGS 118 is suited to:
- Small and medium-sized businesses
- Branch offices
- Distributed organizations
- Professional services companies
- Retail and hospitality environments
- Educational institutions
- Growing corporate networks
- Organizations upgrading to 2.5GbE
- Businesses requiring high-performance VPN connectivity
- Networks requiring optional 5G WAN backup
It is particularly suitable for organizations that need more performance and connectivity than entry-level firewall appliances while still preferring a compact desktop-class platform.
20. Related Products & Categories
Explore related Sophos products and accessories for a complete deployment:
- Sophos Firewall
- Sophos XGS Series Firewalls
- Sophos XGS 118w
- Sophos XGS 128
- Sophos SFP/SFP+ Transceivers
- Sophos 5G Module
- Sophos Rackmount Kits
- Sophos Firewall Accessories
- Sophos Central
21. Frequently Asked Questions
What is the Sophos XGS 118?
The Sophos XGS 118 is a second-generation desktop next-generation firewall designed for SMBs and branch-office environments. It provides high-speed firewall security, VPN, IPS, threat protection, and multi-gigabit Ethernet connectivity.
What is the firewall throughput of the Sophos XGS 118?
The XGS 118 provides up to 15.5 Gbps firewall throughput and 11 Gbps firewall IMIX throughput.
How many Ethernet ports does the XGS 118 have?
The XGS 118 has 9 × 2.5GbE copper ports and 1 × SFP fiber port.
Does the Sophos XGS 118 support 5G?
Yes. The XGS 118 has one expansion slot that supports the optional Gen.2 5G module, subject to the applicable Sophos compatibility and regional requirements.
Does the XGS 118 have built-in Wi-Fi?
No. The standard XGS 118 does not include integrated Wi-Fi. Sophos offers the separate XGS 118w model with built-in Wi-Fi 6 and external antennas.
Does the XGS 118 support redundant power?
Yes. Sophos lists an optional second power supply for the XGS 118, providing a power-redundancy option.
What is the IPsec VPN throughput of the XGS 118?
The XGS 118 provides up to 13 Gbps IPsec VPN throughput and supports up to 1,500 concurrent IPsec VPN tunnels.
Can the Sophos XGS 118 be rack mounted?
Yes. Sophos provides a rackmount option for the XGS 118, while the appliance can also be deployed using other supported mounting methods.
What is the difference between XGS 118 and XGS 118w?
The XGS 118 and XGS 118w share the same core firewall platform and performance class. The XGS 118w adds integrated Wi-Fi 6 with two external antennas, while the standard XGS 118 does not include built-in Wi-Fi.
Who should use the Sophos XGS 118?
The XGS 118 is intended for organizations that need high-performance network security, multiple 2.5GbE interfaces, VPN connectivity, and optional expansion in an SMB or branch-office deployment.
Reviews
There are no reviews yet.