Sophos XGS 128

Description

Sophos XGS 128

The Sophos XGS 128 is a Gen.2 desktop firewall for organizations that need a combination of high security performance, multi-gigabit connectivity, and flexible deployment options. It is positioned within Sophos’ SMB and branch-office XGS lineup and delivers up to 19.1 Gbps firewall throughput.

Security Performance

The XGS 128 provides up to 4.65 Gbps IPS throughput, 4 Gbps threat protection throughput, 4.35 Gbps NGFW throughput, and 15.05 Gbps IPsec VPN throughput. Its TLS inspection performance is rated at up to 1.45 Gbps.

Connectivity

The appliance includes 9 × 2.5GbE copper interfaces and 1 × SFP fiber interface. This port combination supports modern multi-gigabit networks while retaining an option for fiber connectivity.

Expansion

One expansion bay supports the optional Gen.2 5G module. Sophos identifies the XGS 128 as one of the Gen.2 models compatible with this module.

Physical Deployment

The XGS 128 measures 320 × 44 × 212 mm and weighs approximately 2.4 kg unpacked. A dedicated rackmount kit is available separately for XGS 118, XGS 128, and XGS 138 models.

Power and Availability

The standard appliance uses an external 65W power supply, while an optional second power supply provides a redundancy option. Sophos lists the XGS 128 as supporting an optional second power supply within the Gen.2 desktop accessory matrix.

Selection Guide

For High-Speed LAN Connectivity

Choose the XGS 128 when the network requires multiple 2.5GbE interfaces for modern switches, wireless infrastructure, servers, or high-speed client networks.

For Fiber Connectivity

Use the integrated SFP interface with a compatible transceiver when the deployment requires fiber connectivity.

For 5G Backup

Select the optional Gen.2 5G module when cellular WAN is required for redundancy, traffic continuity, or fixed wireless access. The module is compatible with the XGS 128 and must be installed with the appliance powered off because it is not hot-swappable.

For Rack Installation

Use the dedicated rackmount kit designed for XGS 118(w), XGS 128(w), and XGS 138 models.

For Power Redundancy

Consider the optional second power supply when the firewall is deployed in an environment where power redundancy is required.

Always Verify

Confirm the exact hardware model, SFOS version, transceiver compatibility, 5G module availability, power configuration, and rackmount requirements before ordering.

Installation Notes

Place the XGS 128 on a stable surface with adequate ventilation when using it as a desktop appliance. For rack deployments, use the dedicated rackmount kit rather than a generic shelf.

Network cables can be connected to the 2.5GbE copper interfaces according to the required LAN, WAN, DMZ, or other network roles. Use a compatible SFP transceiver when the fiber interface is required.

The optional Gen.2 5G module is not hot-swappable. Sophos specifies that the firewall must be powered off before installing the module and powered on again after installation.

For rack installation, follow the dedicated Sophos rackmount installation instructions and secure the external power adapter in the supplied mounting arrangement.

Best Practices

• Verify the exact XGS 128 model before purchasing accessories.
• Use compatible Sophos-listed transceivers for production fiber connections.
• Match SFP optics to the required fiber type and transmission distance.
• Use the dedicated rackmount kit for rack deployments.
• Maintain sufficient airflow around the appliance.
• Document WAN, LAN, DMZ, and management port assignments.
• Use the optional second power supply where power redundancy is required.
• Install the 5G module only after powering down the appliance.
• Keep firmware and SFOS versions aligned with the features and modules being deployed.
• Check current Sophos documentation before purchasing optional accessories.

Benefits for IT Teams

The Sophos XGS 128 gives IT teams a compact firewall platform with high-speed 2.5GbE connectivity and a broad range of security functions. Its optional 5G module, redundant power capability, and rackmount support make it adaptable to different branch and SMB deployment requirements.

The combination of multi-gigabit interfaces and strong firewall, IPS, VPN, and threat-protection performance can simplify network security planning while providing room for future bandwidth growth.

Main Benefits

High-Speed Network Connectivity

Nine 2.5GbE interfaces provide more bandwidth than standard Gigabit Ethernet.

Benefit: Connect modern switches, servers, access points, and network segments without restricting them to 1GbE speeds.

Strong Security Performance

The XGS 128 combines high firewall throughput with IPS, NGFW, threat protection, VPN, and TLS inspection capabilities.

Benefit: Protect business traffic without selecting a larger rackmount firewall solely for performance requirements.

Flexible WAN Options

The SFP interface and optional 5G module provide additional connectivity choices.

Benefit: Adapt the firewall to fiber, copper, or cellular WAN requirements.

Connectivity Redundancy

An optional second power supply is available for the XGS 128.

Benefit: Improve resilience for environments where uninterrupted firewall operation is important.

Rack Deployment Flexibility

The XGS 128 can be installed using a dedicated rackmount kit.

Benefit: Integrate a desktop appliance into a standard rack environment while keeping the installation organized.

Scalable Branch Security

The combination of high-speed Ethernet, optional 5G, and Sophos Firewall security features supports evolving branch and SMB requirements.

Benefit: Build a firewall deployment that can accommodate higher bandwidth and additional connectivity needs.

Typical Use Cases

1. SMB Network Security

Deploy the XGS 128 as the central firewall for small and medium-sized business networks requiring high-speed LAN and internet connectivity.

2. Branch Office Protection

Use the appliance to secure distributed branch networks with centralized firewall policies, VPN connectivity, and threat protection.

3. High-Speed LAN Gateway

The 2.5GbE ports make the XGS 128 suitable for networks using multi-gigabit switches, wireless access points, and modern client infrastructure.

4. Fiber WAN Connectivity

Use the integrated SFP interface with a compatible transceiver when fiber connectivity is required.

5. 5G WAN Backup

Install the optional Gen.2 5G module to provide cellular connectivity for WAN redundancy or fixed wireless access scenarios.

6. Rack-Based Firewall Deployment

Use the dedicated rackmount solution to integrate the desktop XGS 128 into a 19-inch rack environment. The Sophos rackmount documentation specifically identifies the rackmount kit for XGS 118, XGS 128, and XGS 138 models.

Who Should Buy Sophos XGS 128?

The Sophos XGS 128 is suited to:

• Small and medium-sized businesses
• Branch offices
• Distributed organizations
• Retail locations
• Professional offices
• Organizations upgrading from Gigabit Ethernet
• Networks using multi-gigabit switches and access points
• Businesses requiring high-performance VPN connectivity
• Deployments needing optional 5G WAN redundancy
• IT teams requiring rackmount deployment of a desktop firewall

It is particularly suitable where a compact desktop firewall needs to provide high throughput while supporting multi-gigabit network infrastructure and optional connectivity expansion.

Related Categories

Explore related product categories for deeper deployment planning:

• Sophos Firewalls – Next-generation firewall appliances
• Sophos XGS Series – Desktop and distributed-edge firewall platforms
• Sophos XGS 128 Accessories – Rackmount and connectivity options
• Sophos SFP Transceivers – Fiber and copper connectivity
• Sophos 5G Modules – Cellular WAN connectivity for compatible XGS models
• Sophos Rackmounts – Dedicated mounting solutions for desktop appliances
• Sophos Firewall Licenses – Security and subscription options

Frequently Asked Questions

What is the Sophos XGS 128 used for?

The Sophos XGS 128 is a Gen.2 desktop next-generation firewall designed for SMBs, branch offices, and other distributed network environments that require high-speed connectivity and advanced network security.

How fast is the Sophos XGS 128?

Sophos rates the XGS 128 at up to 19.1 Gbps firewall throughput, 14.5 Gbps firewall IMIX, 4.65 Gbps IPS, 15.05 Gbps IPsec VPN, and 4 Gbps threat protection throughput.

How many Ethernet ports does the Sophos XGS 128 have?

The XGS 128 provides 9 × 2.5GbE copper ports and 1 × SFP fiber port.

Does the Sophos XGS 128 support 5G?

Yes. The XGS 128 has one expansion bay andnal Sophos Gen.2 5G module. supports the optio

Does the XGS 128 have built-in Wi-Fi?

No. The standard XGS 128 does not include integrated Wi-Fi. The XGS 128w is the corresponding wireless model with integrated Wi-Fi 6.

Can the Sophos XGS 128 be rack mounted?

Yes. A dedicated rackmount kit is available for the XGS 128. Sophos’ mounting instructions identify the kit for XGS 118(w), XGS 128(w), and XGS 138 models.

Does the XGS 128 support redundant power?

Yes. Sophos lists an optional second power supply for the XGS 128.

What is the difference between XGS 128 and XGS 128w?

The primary hardware difference relevant to deployment is wireless connectivity. The XGS 128 is the standard non-wireless model, while the XGS 128w adds integrated Wi-Fi 6 with dual-band 2.4 GHz and 5 GHz operation.

Is the XGS 128 suitable for branch offices?

Yes. Sophos positions the second-generation XGS desktop range for SMB and branch-office environments, and the XGS 128 combines high throughput with 2.5GbE connectivity, optional 5G, and optional power redundancy.

Is the XGS 128 suitable for multi-gigabit networks?

Yes. Its nine fixed 2.5GbE copper ports make it suitable for network environments that have moved beyond conventional 1GbE connectivity.