-
1GbE Copper Transceiver (1000 Base-T), ITFZTCHTC
BUY$359.16MSRP: $378.02 -
1GbE Fiber Transceiver Short Range (1000 Base-SX), ITFZTCHSX
BUY$231.24MSRP: $242.72 -
1GbE Fiber Transceiver Long Range (1000 Base-LX), ITFZTCHLX
BUY$615.00MSRP: $647.80 -
10GbE Fiber Transceiver Short Range (10 Base-SR), ITFZTCHXF
BUY$839.68MSRP: $883.96 -
10GbE Fiber Transceiver Long Range (10 Base-LR), ITFZTCHLR
BUY$1,096.34MSRP: $1,153.74 -
2 port GbE fiber (LC) Bypass + 4 port GbE SFP FleXi Port module (for all XGS Rackmount models), XSBZTCHF6
BUY$4,210.70MSRP: $4,875.72 -
-
-
2 port 40GbE QSFP+ Flexi Port Module (for XGS 5500/6500 models only) , XSBZTCHF2
BUY$2,242.70MSRP: $2,596.94 -
-
-
-
4G CAT-7 module (for XGS 116(w)/126(w)/136(w) only) Americas, HM4G1A00ZZPCAA
BUY$555.96MSRP: $643.70 -
4 port 10GbE SFP+ FleXi Port module (for all XGS Rackmount models), XSAZTCHF4
BUY$1,385.80MSRP: $1,457.14 -
5G module (for XGS 116(w)/126(w)/136(w) only), HM5G1W00ZZPCAA
BUY$1,271.00MSRP: $1,471.08 -
5G module (for XGS 118(w)/128(w)/138 only), HM5G2W00ZZPCAA
BUY$797.86MSRP: $923.32
Sophos XGS Add-on Modules
Expand your firewall instead of replacing it.
Sophos XGS appliances have expansion bays and slots, so you can add ports, cellular connectivity, and redundancy as your network changes. Adapt the box you already own rather than buying new hardware mid-term. Every module is model-specific, so we match it to your appliance.
Not sure what fits your model? Send us your serial or call 1-833-283-7373 and we will confirm compatibility.
Add portsFiber, copper, multi-gig
5G readyCellular failover
RedundancySecond power supply
Model-specificWe match your appliance
Modules by firewall type.
What you can add depends on your appliance. Find your range below, then use search to pull the exact part, or send us your serial and we will confirm it.
Desktop — XGS 88 to 138
Small and branch office models. Expansion is limited to cellular and fiber on the models that support it.
| Module | What it adds | Buy |
|---|---|---|
| 5G / cellular module | Redundant cellular connectivity or 5G fixed wireless access, mounted in the expansion bay. For XGS 118, 128, and 138 only. | Shop |
| SFP+ transceivers | Optical or copper transceivers for the two built-in 10 GE SFP+ fiber ports on the XGS 138. | Shop |
The fanless XGS 88 and 108 have no expansion bay. Gen 2 w-models include built-in Wi-Fi 6, so no separate Wi-Fi module is needed. Desktop models do not take Flexi Port modules.
1U Distributed Edge — XGS 2100 to 4500
Rackmount models with expansion bays for ports, plus power and mounting options.
| Module | What it adds | Buy |
|---|---|---|
| Flexi Port modules | Extra ports in an expansion bay: copper, fiber, 10 GE SFP+, or multi-gigabit and PoE options, so you can adapt connectivity without new hardware. | Shop |
| SFP / SFP+ transceivers | Optical or copper transceivers for the SFP and SFP+ interfaces on the appliance or a Flexi Port module. | Shop |
| Redundant power supply | A second, rear-connect power supply so a single power failure does not take the firewall offline. | Shop |
| Rackmount rails | Sliding rails for a stable data-center install, recommended over the supplied ears on the XGS 2100 and 2300. | Shop |
2U Enterprise Edge — XGS 5500 to 8500
High port-density models with the most expansion and built-in redundancy.
| Module | What it adds | Buy |
|---|---|---|
| High-density Flexi Port modules | Additional port expansion to push port density up to 48 (XGS 5500), 68 (6500), or 70 (7500/8500). | Shop |
| SFP / SFP+ / QSFP28 transceivers | Transceivers for fiber links, including 40 GE (XGS 7500) and 100 GE (XGS 8500) QSFP28 uplinks. | Shop |
| Redundant power supply | A second hot-swap power supply for business-continuity uptime on always-on appliances. | Shop |
Looking for a branch device or wireless? SD-RED remote ethernet devices and Sophos wireless access points and accessories are in their own sections. If a search does not show the exact part for your model, send us your serial and we will match it.
Why add a module instead of a new firewall.
Modules let your appliance keep pace with your network at a fraction of the cost of replacement.
Keep up with faster links
Add 10 GE or multi-gigabit ports when your ISP or access points move to higher speeds, without swapping the appliance.
Add a backup connection
A 5G module gives a site cellular failover, so a wired outage does not take the location offline.
Harden against downtime
A redundant power supply removes a single point of failure on a firewall your business depends on.
1
appliance, more life
Send us your firewall model and serial and what you want to add. We will confirm the compatible module, quote it, and reply in two to three business days.
Add-on module questions.
Which firewalls take Flexi Port modules?
The rackmount models. The 1U (XGS 2100 to 4500) and 2U (5500 to 8500) appliances have expansion bays for Flexi Port modules. Desktop models do not use Flexi Port modules, though the XGS 138 has built-in 10 GE fiber ports.
Which models support a 5G module?
The Gen 2 desktop models XGS 118, 128, and 138 support an optional 5G module in their expansion bay, for redundant cellular connectivity or 5G fixed wireless access.
Are modules specific to my firewall model?
Yes. Modules, transceivers, and power supplies are matched to specific appliance models, which is why we confirm compatibility from your model and serial before quoting.
Do you sell branch devices and access points here?
Those are in their own sections. SD-RED remote ethernet devices for branch connectivity and Sophos wireless access points and accessories are listed separately from these appliance modules.
Can I add ports later, or only at purchase?
Later is fine. Flexi Port modules are designed to be added mid-life, so you can expand connectivity when your needs change rather than buying a new appliance.
Add the right module to your appliance.
Send us your firewall model and serial and what you want to add. We will confirm the compatible part, quote it, and reply in two to three business days. Browse add-on modules below.