Technical Specifications
XGS 108 Gen2 Standard Protection
| Performance | |
|---|---|
| Firewall throughput | 12,500 Mbps |
| Firewall IMIX | 8,100 Mbps |
| IPS throughput | 2,500 Mbps |
| Threat Protection throughput | 2,500 Mbps |
| NGFW | 2,600 Mbps |
| Concurrent connections | 4,190,000 |
| New connections/sec | 53,000 |
| IPsec VPN throughput | 8,250 Mbps |
| SSL VPN concurrent tunnels | 1,000 |
| IPsec VPN concurrent tunnels | 1,000 |
| Xstream SSL/TLS Inspection | 800 Mbps |
| Xstream SSL/TLS concurrent connections | 12,288 |
| Physical Interfaces | |
|---|---|
| Storage (local quarantine/logs) | 64 GB UFS 2.1 |
| Ethernet interfaces (fixed) | 6 x 2.5 GE copper 1 x SFP Fiber |
| Management ports | 1 x COM RJ-45 1 x Micro-USB (cable incl.) |
| Other I/O ports | 1 x USB 2.0 (front) 1 x USB 3.0 (rear) |
| Number of expansion slots | 0 |
| Optional add-on connectivity | n/a |
| Physical Specifications | |
|---|---|
| Mounting | Rackmount kit available (to be ordered separately) |
| Dimensions: Width X height X depth | 260 x 44 x 180 mm |
| Weight | 1.8 kg/3.97 lbs (unpacked) 2.4 kg/5.29 lbs (packed) (w-model minimally more) |
| Environment | |
|---|---|
| Power supply | External auto-ranging AC-DC 100-240VAC 2A@50-60 Hz 12VDC 5A, 60W Optional second redundant power supply |
| Power consumption | 21.5 W/73.36 BTU/hr (108 idle) 25.5 W/87.01 BTU/hr (108w idle) 27 W/92.13 BTU/hr (108 max.) 30 W/102.36 BTU/hr (108w max.) |
| Noise level (avg.) | 0 dBA - fanless |
| Operating temperature | 0°C to 40°C (operating) -20°C to +70°C (storage) |
| Humidity | 10% to 90%, non-condensing |
| Product Certifications | |
|---|---|
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, BSMI, RCM, NOM, Anatel, TEC |
| Xstream Protection Bundle | Available Separately | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Standard Protection ($1091) - 1 year | Available Separately | |||||||||
| Base Firewall | Network Protection | Web Protection | DNS Protection | Bundle Only Features | Zero-Day Protection | Central Orchestration | Central Firewall Reporting Adv | Email Protection | Web Server Protection | |
| General Management (Incl. HA) | ✓ | |||||||||
| Xstream Architecture | ✓ | |||||||||
| Firewall, Networking and Routing | ✓ | |||||||||
| Xstream SD-WAN | ✓ | |||||||||
| Base Traffic Shaping and Quotas | ✓ | |||||||||
| Secure Wireless | ✓ | |||||||||
| Authentication | ✓ | |||||||||
| Self-Serve User Portal | ✓ | |||||||||
| VPN (IPsec, SSL, etc) | ✓ | |||||||||
| RED Site-to-Site VPN | ✓ | |||||||||
| Sophos Connect VPN Client | ✓ | |||||||||
| Intrusion Prevention (IPS) | ✓ | |||||||||
| Active Threat Response | ✓ | |||||||||
| Sophos X-Ops Threat Feeds | ✓ | |||||||||
| MDR/XDR Threat Feeds | ✓ | |||||||||
| Third Party Threat Feeds | ✓ | |||||||||
| Synchronized Security Heartbeat | ✓ | |||||||||
| SD-RED Device Management | ✓ | |||||||||
| Clientless VPN | ✓ | |||||||||
| Synchronized Application Control | ✓ | |||||||||
| Web Protection and Control | ✓ | |||||||||
| Application Protection and Control | ✓ | |||||||||
| Cloud Application Visibility | ✓ | |||||||||
| Web and App Traffic Shaping | ✓ | |||||||||
| DNS Security and Compliance | ✓ | |||||||||
| Dynamic Sandbox Analysis | ✓ | |||||||||
| Threat Intelligence Analysis | ✓ | |||||||||
| SD-WAN Orchestration | ✓ | |||||||||
| Central Firewall Reporting Data* | 7 Days | 7 Days | 7 Days | 7 Days | 7 Days | 7 Days | 30 Days | Up to 1 Year | 7 Days | 7 Days |
| CFR Advanced Features | ✓ | ✓ | ||||||||
| Email Protection and Control | ✓ | |||||||||
| Email Quarantine Management | ✓ | |||||||||
| Email Encryption and DLP | ✓ | |||||||||
| Web Application Firewall Protection | ✓ | |||||||||
| On-box Logging/Reporting | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Sophos Central Management | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | |
| ZTNA Gateway | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | |
Firewall Brochure Please note: Some feature listings are not supported on XGS 87 and XGS 88 models
(on-box reporting, dual AV scanning, WAF AV scanning and email message transfer agent (MTA) functionality)
Licensing options differ slightly to the above
Data storage duration is an estimate based on average network usage and will vary depending on actual log data volume.
Included with any bundle, support, or protection subscription. Customers with a Base License only must add support to be eligible for these features.