Sophos XGS 1U firewalls for mid-size and multi-site business.

The Distributed Edge range is the 1U rackmount tier, built for growing companies and networks with several connected locations. These appliances add the throughput, port density, and SD-WAN capacity to tie multiple sites together under one policy, with Flexi Port expansion and an optional redundant power supply.

Not sure which fits? Get a quote or call 1-833-283-7373 and we will size it.

1U rackmountData-center ready

SD-WANTie sites together

Flexi PortAdd ports later

Redundant PSUOptional on all

Who each model is for.

All six are 1U appliances that run the same protection. The difference is throughput and how much your network and inspection demand.

XGS 2100 & 2300

The entry 1U models, for a mid-size business or a few connected sites moving up from a desktop firewall. The 2300 adds capacity over the 2100.

XGS 3100 & 3300

The core of the range, for growing multi-site networks that need more throughput for TLS inspection and SD-WAN across locations.

XGS 4300 & 4500

The top of the 1U range, with a large jump in threat-protection throughput for heavier mid-market and distributed networks that push a lot of inspected traffic.

Compare the models.

All figures are Sophos published specifications. Threat protection throughput, the real-world number with protection on, is the one to size against.

	XGS 2100	XGS 2300	XGS 3100	XGS 3300	XGS 4300	XGS 4500
Firewall throughput	30 Gbps	39 Gbps	47 Gbps	58 Gbps	75 Gbps	80 Gbps
Threat protection	5.0 Gbps	5.5 Gbps	7.4 Gbps	10.0 Gbps	25.2 Gbps	31.85 Gbps
TLS inspection	1.1 Gbps	1.45 Gbps	2.47 Gbps	3.13 Gbps	8.0 Gbps	10.6 Gbps
Concurrent connections	6.5M	6.5M	12.26M	13.7M	16.6M	17.2M
Max port density	18	18	20	20	28	28
Form factor	1U rack	1U rack	1U rack	1U rack	1U rack	1U rack
Buy	Shop	Shop	Shop	Shop	Shop	Shop

All 1U models use a dual-processor design, include LAN bypass ports, and take modular Flexi Port expansion for copper, fiber, 10 GE, or PoE. A second power supply is optional on every model. Exact throughput depends on the protection you enable, so we size it with you.

Sizing a 1U firewall.

Two things decide it: how much inspected traffic you push, and how many sites you connect.

A few sites, moderate traffic? 2100 or 2300

The entry models handle a mid-size business or a small group of connected locations.

Growing multi-site? 3100 or 3300

More TLS inspection and SD-WAN capacity for networks that are scaling out.

Heavy inspected traffic? 4300 or 4500

The big step up in threat-protection throughput for demanding distributed networks.

1U models, one right fit

Send us your site count, user count, and internet speed and we will match the exact XGS model and licensing, quote it, and reply in two to three business days.

Get a quote How to choose

Smaller, or bigger?

For a single small office, the desktop range is a better fit. For an enterprise or campus edge with the heaviest traffic, the 2U Enterprise range scales to 100 Gbps uplinks.

Compare all XGS tiers See 2U Enterprise