The right Sophos firewall, sized and quoted for you.
XGS models from a small office to a 100 Gbps enterprise edge. Tell us your network and we match the model, at bundle pricing already under MSRP.
Know the model? Search it. Not sure? Get a quote or call 1-833-283-7373 and we will size it with you.
What sets Sophos XGS apart.
A firewall is only as good as what it does with what it sees. Here is what Sophos XGS gives you, in plain terms.
Fast, even with deep inspection on
Sophos calls it Xstream: dedicated processors handle trusted traffic so the firewall can inspect encrypted and deep traffic without the slowdown other firewalls hit.
The firewall and your devices act as one
Sophos calls it Synchronized Security: the firewall and the Sophos software on your computers share a live signal, so when one spots a threat, the infected device is cut off automatically before it spreads.
Threats blocked automatically
Sophos calls it Active Threat Response: known-bad activity is turned into firewall blocks on its own, so containment does not wait on someone hand-writing a rule at 2am.
Everything managed in one place
Run every firewall, switch, and access point from a single cloud console (Sophos Central). Templates, scheduled updates, and backups make multi-site and MSP management workable for a lean team.
A firewall that does not work alone.
Most firewalls block what they recognize and stop there. Sophos XGS is built to work with your endpoints, so a threat that slips past the perimeter still gets caught and contained. That is the difference between a device and a system.
Fast even with inspection on
Xstream acceleration means TLS and deep packet inspection do not force a trade-off between security and speed.
SD-WAN and VPN built in
Tie multiple sites and remote workers into one policy without bolting on extra boxes.
Hardened and self-maintaining
Automated patching, configuration health check, and remote integrity monitoring keep the firewall itself secure.
Gbps at the top end
From a desktop XGS 88 for a branch office to a 2U XGS 8500 pushing up to 100 Gbps at a data-center edge, there is a model sized for your network, not a size up you overpay for.
Sized for the way you run.
Small & branch offices
Desktop XGS models protect a single site or branch without needing a rack, with optional built-in Wi-Fi.
Distributed & mid-market
1U rackmount models plus SD-WAN pull multiple locations into one policy and one console.
MSPs & enterprise edge
2U models scale to 100 Gbps and are managed centrally across sites and clients from Sophos Central.
Firewall questions.
What is the difference between XGS and the old XG series?
The XG series reached end of life on March 31, 2025 and no longer receives security updates or patches. XGS is the current family, with faster hardware and Xstream acceleration. If you are still on XG, it is time to move.
Do I need Sophos Endpoint to get value from the firewall?
No. The firewall protects your network on its own. Pairing it with Sophos Endpoint turns on Synchronized Security, where the two isolate threats together automatically, but it is not required to start.
Which XGS model do I need?
It depends on your user and server counts, number of sites, and internet speed. Send us those and we will match the right model and subscription tier, with no obligation to buy.
Can I manage more than one firewall from one place?
Yes. Sophos Central manages all your firewalls, switches, and access points from a single cloud console, which is what makes multi-site and MSP setups practical.
Let's size your Sophos firewall.
Tell us your users, sites, and internet speed. We will match the right XGS model and quote it at bundle pricing for Canada or the USA.