Sophos XGS 3100: Specs, Pricing and Buying Guide
Posted by Saif Khan on 2026 Sep 13th
Sophos XGS 3100 buying guide: full specs, pricing, and where it fits
The Sophos XGS 3100 sits in the upper half of the 1U rackmount range. It delivers 47 Gbps firewall throughput, 10.5 Gbps IPS, 7.4 Gbps threat protection, and 2.47 Gbps of TLS inspection, with 12.26 million concurrent connections and a Flexi Port bay for expansion. It is the model most businesses land on when the 2300 runs out of inspection headroom but a 4300 is more than the site needs.
This guide leads with the datasheet, then shows the whole range side by side so you can see whether a step up is worth the difference.
Sophos XGS 3100 full specifications
Sophos-published figures. Treat throughput as vendor-measured under set conditions and size to your real traffic.
Performance
| Metric | XGS 3100 |
|---|---|
| Firewall throughput | 47,000 Mbps (47 Gbps) |
| IPS throughput | 10,500 Mbps |
| Threat protection throughput | 7,400 Mbps |
| Xstream TLS (SSL) inspection | 2,470 Mbps |
| IPsec VPN throughput | 25,000 Mbps |
| Concurrent connections | 12,260,000 |
| New connections per second | 186,600 |
Interfaces and hardware
| Item | XGS 3100 |
|---|---|
| Fixed Ethernet interfaces | (fixed) 8 x GE copper 2 x SFP fiber* 2 x SFP+ 10 GE fiber* Bypass port pairs 1 M |
| Flexi Port bay | 1, for an optional expansion module |
| Form factor | 1U rackmount |
Where the XGS 3100 sits in the range
Every 1U rackmount model, with the 3100 highlighted. Prices are on each product page.
| Model | FirewallMbps | IPSMbps | Threat prot.Mbps | TLSMbps | Price1-yr Xstream |
|---|---|---|---|---|---|
| XGS 2100 | 30,000 | 6,000 | 5,000 | 1,100 | See price |
| XGS 2300 | 39,000 | 7,000 | 5,500 | 1,450 | See price |
| XGS 3100 you are here | 47,000 | 10,500 | 7400 | 2470 | See price |
| XGS 3300 | 58,000 | 14,000 | 10,000 | 3,130 | See price |
| XGS 4300 | 75,000 | 29,500 | 26,200 | 8,000 | See price |
| XGS 4500 | 80,000 | 36,500 | 31,850 | 10,600 | See price |
Every model links to its product page, where the current price is shown. If the next model up is worth the difference for your site, buy that one instead. Size on the TLS column rather than firewall throughput, since almost all web traffic is encrypted.
Reading that table
- The 3100 roughly doubles the 2300 on inspection. TLS goes from 1,450 to 2,470 Mbps and IPS from 7,000 to 10,500. If your 2300 is running out of headroom with Xstream enabled, this is the step that fixes it.
- The jump to the 4300 is larger than the jump to the 3100. The 4300 more than triples TLS inspection to 8,000 Mbps and nearly quadruples threat protection. If you expect growth, price both before deciding, because the gap in capability is wider than the gap in price.
- The 3300 is a modest step. TLS 3,130 against 2,470. Worth it only if you are close to the 3100 ceiling today.
Flexi Port expansion
The 3100 has one Flexi Port bay and takes any module rated for XGS rackmount models, including the 4 port 10GbE SFP+ module and the PoE module. Only one fits at a time.
How to buy
Three routes, and the right one depends on cash flow and whether you want to own the hardware.
| Route | Upfront | Monthly | You own the hardware |
|---|---|---|---|
| Term licence, 1, 3 or 5 year | See current price | None | Yes. Price locked for the term |
| Own the appliance, licence monthly | Appliance price | Ask for the current rate | Yes |
| Hardware as a Service | $0 | Ask for the current rate | No, the MSP owns it, and payments are perpetual |
Monthly and HWaaS rates for the 3100 are quoted rather than listed. Ask us and we will give you all three numbers so you can compare them properly.
Standard or Xstream Protection?
Xstream adds TLS 1.3 inspection, cloud sandboxing and the advanced IPS. At 2,470 Mbps of TLS inspection, the 3100 is built to run it. Standard covers the base firewall plus SD-WAN and ZTNA, without the full threat stack. If you are buying a 3100 and not enabling Xstream, you are paying for capacity you will not use.
Get a Sophos XGS 3100 quote from Nuformat
Nuformat is a Sophos partner serving Canada and the United States. Tell us your user count, internet speed and which services you plan to run, and we will confirm whether the 3100 is right or point you at a different model. Contact Nuformat for a quote.
Frequently asked questions
What are the Sophos XGS 3100 specifications?
The XGS 3100 delivers 47 Gbps firewall throughput, 10.5 Gbps IPS, 7.4 Gbps threat protection and 2.47 Gbps TLS inspection, with 12,260,000 concurrent connections. It is a 1U rackmount appliance with one Flexi Port expansion bay.
What does the Sophos XGS 3100 cost?
Current pricing for the appliance and each subscription term is shown on the product page, which always reflects the live figure. Monthly licensing and Hardware as a Service are quoted rather than listed, so ask us and we will give you all three so you can compare.
Should I buy the XGS 3100 or the XGS 4300?
The 4300 more than triples TLS inspection, from 2,470 to 8,000 Mbps, and nearly quadruples threat protection. That is a larger capability gap than the price gap suggests, so price both before deciding. Choose the 3100 if your inspection needs are stable, and the 4300 if you expect growth.
Is the XGS 3100 a big enough step up from the 2300?
Yes. TLS inspection goes from 1,450 to 2,470 Mbps and IPS from 7,000 to 10,500, so it roughly doubles inspection capacity. If a 2300 is struggling with Xstream enabled, the 3100 resolves it.
How many users does the XGS 3100 support?
Sophos does not publish user counts per model, so we do not quote them. Sizing depends on your internet speed, how many services you enable and how much traffic you inspect. Send us those three and we will size it against the Sophos sizing tool.
Can the XGS 3100 be expanded?
Yes. It has one Flexi Port bay that takes any module rated for XGS rackmount models, including 10GbE fibre, PoE and high-density copper or SFP options. Only one module fits at a time.