Sophos XGS Firewall

Why businesses choose Sophos XGS firewalls.

Sophos XGS is a next-gen firewall built around one idea most firewalls miss: your firewall and your endpoints should work together. It inspects encrypted traffic at speed, and when a device gets compromised, it isolates it on its own. Here is what you actually get.

What's included

The benefits that matter.

Encrypted traffic inspection

Almost all web traffic is now encrypted, which is exactly where threats hide. Sophos XGS decrypts and inspects it, including TLS 1.3, using dedicated Xstream flow processors so inspection does not crush performance.

Synchronized Security

This is the part only Sophos does. The firewall and your Sophos endpoints share a live Security Heartbeat, so when a device is compromised the firewall isolates it automatically and stops the threat spreading sideways.

Active Threat Response

Backed by Sophos X-Ops threat intelligence and Sophos MDR and XDR, the firewall blocks active threats in real time without you writing a rule for each one.

Zero-day protection

Deep learning from SophosLabs Intelix plus cloud sandboxing catch ransomware and unknown files before they reach the network.

One cloud console

Manage the firewall, endpoints, switches, and access points from a single Sophos Central console, included at no extra charge.

Performance where it counts

Trusted SaaS, VoIP, and SD-WAN traffic is offloaded to the Xstream FastPath at wire speed, and DNS Protection is included in the Xstream bundle.

How it works

The firewall and the endpoint, working together.

Most firewalls guard the perimeter and leave the endpoint to fend for itself. Sophos links the two, so a threat spotted anywhere triggers a coordinated response everywhere.

  • Dual-processor XGS appliances with a dedicated Xstream Flow Processor for acceleration
  • A single streaming engine inspects for antivirus, IPS, web, app control, and TLS in one pass
  • Ties into Sophos Endpoint, MDR, and XDR for automatic, coordinated threat response
  • Recognized as a Gartner Magic Quadrant Leader for network firewalls

Straight answers

Sophos XGS firewall questions.

What makes Sophos Firewall different from other firewalls?

Synchronized Security. The firewall and your Sophos endpoints share a live Security Heartbeat, so a compromised device is isolated automatically and lateral movement is stopped. Very few firewalls tie the network and the endpoint together like that.

Can it inspect encrypted traffic without slowing us down?

Yes. Nearly all web traffic is encrypted, which most firewalls skip for fear of the performance hit. Sophos XGS uses dedicated Xstream flow processors to inspect TLS 1.3 traffic and offload trusted flows, so you keep both visibility and speed.

Do I need Sophos endpoints to get value from it?

It works as a standalone next-gen firewall, but the best features, automatic threat isolation, Security Heartbeat, and user and app identification, get much stronger when Sophos Endpoint is deployed alongside it.

Which XGS model and license do I need?

It depends on your users, internet speed, and which protections you want turned on, such as the Standard or Xstream bundle. Tell us your setup and we will size the appliance and the right subscription.

Ready when you are

Get the right Sophos XGS for your network.

Tell us your users, speeds, and sites, and we'll size the appliance and license bundle and send a quote.