Which 2U Sophos XGS firewall should I choose?

Size on TLS inspection. The XGS 5500 gives 13,500 Mbps and the XGS 8500 gives 24,000 Mbps. Firewall throughput runs from 100,000 to 190,000 Mbps across the four models.

When do I need a 2U XGS rather than a 1U?

When your site exceeds roughly 80,000 Mbps of firewall throughput or 10,600 Mbps of TLS inspection, which is the ceiling of the largest 1U model, the XGS 4500.

What is the difference between the XGS 7500 and the XGS 8500?

The 8500 delivers 190,000 Mbps firewall throughput against 160,000, 24,000 Mbps TLS inspection against 19,500, and 93,000 Mbps IPS against 71,500.

Do 2U XGS firewalls ship with redundant power?

Yes. Every 2U model ships with redundant power supplies.

Sophos XGS Series

Compare Sophos XGS 2U firewalls (enterprise edge)

Four 2U models for campus and data-center edges, from 100 Gbps to 190 Gbps of firewall throughput. Compare them, buy direct, or let us size it with you.

Not sure which fits? Get a quote or call 1-833-283-7373 and we will size it with you.

Compare the models.

All figures are Sophos published specifications, measured under ideal test conditions. Size on TLS inspection rather than firewall throughput: almost all traffic is encrypted, so TLS is the number that limits what the appliance can actually inspect.

	XGS 5500Entry 2U	XGS 6500	XGS 7500	XGS 8500Top of range
Firewall throughput	100 Gbps	120 Gbps	160 Gbps	190 Gbps
TLS inspection	13.5 Gbps	16.0 Gbps	19.5 Gbps	24.0 Gbps
IPS throughput	40.0 Gbps	50.75 Gbps	71.5 Gbps	93.0 Gbps
Threat protection	46.0 Gbps	53.5 Gbps	70.0 Gbps	92.5 Gbps
IPsec VPN	92.5 Gbps	109.8 Gbps	117 Gbps	141 Gbps
NGFW	38.0 Gbps	46.5 Gbps	58.0 Gbps	76.0 Gbps
Form factor	2U rack	2U rack	2U rack	2U rack
Buy	Shop XGS 5500	Shop XGS 6500	Shop XGS 7500	Shop XGS 8500

Every 2U model uses a dual-processor design with a dedicated Xstream flow processor, takes modular Flexi Port expansion for copper, fiber, 10 GE or PoE, and ships with redundant power. Throughput figures assume ideal conditions; real-world performance depends on which protection features are enabled.

Not sure a 2U is what you need?

If your site sits under 80 Gbps of firewall throughput, a 1U distributed-edge model is usually the better spend. Tell us the site and we will size it honestly.

Get a sizing quote Compare 1U models Shop all 2U models