Description
Sophos XGS 108 with Standard Protection, 5-year
The Sophos XGS 108 is a compact desktop next-generation firewall built for small offices and branch sites. It inspects encrypted traffic on the appliance itself and is managed from the Sophos cloud console (now becoming Sophos Fusion). It comes with a 5-year Standard Protection subscription.
Key specifications
| Firewall throughput | 12,500 Mbps |
| IPS throughput | 2,500 Mbps |
| Threat protection throughput | 2,500 Mbps |
| Concurrent connections | 4,150,000 |
| IPsec VPN throughput | 8,250 Mbps |
| IPsec VPN concurrent tunnels | 1,000 |
Why choose it
- It looks inside encrypted traffic. TLS 1.3 inspection runs on the box, closing the blind spot where most malware hides.
- One console for the whole network. Firewalls, switches, wireless, and endpoints together, with zero-touch deployment.
- Security without the slowdown. The Xstream architecture accelerates deep packet inspection.
- Sized and supported by Nuformat across Canada and the USA, outright or on monthly and HWaaS terms.
What Standard Protection includes
Standard Protection covers the base firewall plus Xstream SD-WAN, ZTNA, and network visibility. Step up to Xstream Protection for the full threat stack, including TLS inspection and cloud sandboxing.
Frequently asked questions
Standard or Xstream Protection? Standard covers the base firewall plus SD-WAN and ZTNA. Xstream adds the full threat stack, including TLS inspection and cloud sandboxing. Most networks want Xstream.
Can I pay monthly instead of a term upfront? Yes. Ask us about monthly licensing and Hardware as a Service (HWaaS) for the XGS 108.
Is cloud management included? Yes, at no extra cost, through the Sophos console.
Not sure this is the right model? Tell us your user count and internet speed and we will confirm the fit.
Full specifications
Performance
| Firewall throughput | 12,500 Mbps |
| Firewall IMIX | 8,100 Mbps |
| IPS throughput | 2,500 Mbps |
| Threat protection throughput | 2,500 Mbps |
| NGFW | 2,600 Mbps |
| Concurrent connections | 4,150,000 |
| New connections/sec | 53,000 |
| IPsec VPN throughput | 8,250 Mbps |
| IPsec VPN concurrent tunnels | 1,000 |
| SSL VPN concurrent tunnels | 1,000 |
| Xstream SSL/TLS Inspection | 800 Mbps |
| Xstream SSL/TLS concurrent connections | 12,288 |
Physical Interfaces
| Storage | 64 GB UFS 2.1 |
| Total quarantining/logs | - |
| Ethernet interfaces (fixed) | 6 x 2.5 GE copper 1 x SFP fiber |
| Management ports | 1 x COM RJ45 1 x Micro-USB (cable incl.) |
| Other I/O ports | 1 x USB 2.0 (front) 1 x USB 3.0 (rear) |
| Number of expansion slots | 0 |
| Optional add-on connectivity | n/a |
Physical Specifications
| Mounting | Rackmount kit available (to be ordered separately) |
| Dimensions: Width x height x depth | 280 x 44 x 180 mm |
| Weight | 1.8 kg/3.97 lbs (unpacked) 2.4 kg/5.29 lbs (packed) (w-model minimally more) |
Environment
| Power supply | External auto-ranging AC-DC 100-240VAC, 2A@50-60 Hz 12VDC, 5A, 60W Optional second redundant power supply |
| Power consumption (typical) | 21.5 W/73.36 BTU/hr (108 idle) 25.5 W/87.01 BTU/hr (108w idle) 27 W/92.13 BTU/hr (108 max.) 30 W/102.38 BTU/hr (108w max.) |
| Noise level (avg.) | 0 dBA - fanless |
| Operating temperature | 0°C to 40°C (operating) -20°C to +70°C (storage) |
| Humidity | 10% to 90%, non-condensing |
Product Certifications
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, BSMI, RCM, NOM, Anatel*, TEC |
Details
| Xstream Protection Bundle | Available Separately |
| Standard Protection | Available Separately |
| Base Firewall | Network Protection Web Protection DNS Protection Bundle Only Features Zero-Day Protection Central Orchestration Central Firewall Reporting Adv Email Protection Web Server Protection |
Get it from Nuformat
Add it to your cart, or contact Nuformat for a quote sized to your needs. We serve Canada and the USA.

