Description
Sophos XGS 108 Gen2 with Xstream Protection, 3-year subscription
The Sophos XGS 108 is a next-generation firewall delivering 12,500 Mbps firewall throughput and 800 Mbps of Xstream TLS inspection. This listing is the appliance with 3 year Xstream Protection.
Size on the TLS inspection figure, not firewall throughput. Almost all web traffic is encrypted, so 800 Mbps is the number that limits what this appliance can actually inspect. The firewall throughput figure assumes unencrypted traffic you will rarely see.
Specifications
Sophos-published figures. Treat throughput as vendor-measured under set conditions.
| Metric | XGS 108 |
|---|---|
| Firewall throughput | 12,500 Mbps |
| IPS throughput | 2,500 Mbps |
| Threat protection throughput | 2,500 Mbps |
| Xstream TLS inspection | 800 Mbps |
| IPsec VPN throughput | 8,250 Mbps |
| Concurrent connections | 4,150,000 |
Standard or Xstream Protection?
| Included | Standard | Xstream |
|---|---|---|
| Firewall, SD-WAN, ZTNA | Yes | Yes |
| TLS 1.3 inspection | No | Yes |
| Cloud sandboxing | No | Yes |
| Advanced IPS | No | Yes |
If your users browse the web, Xstream is the bundle that inspects encrypted traffic. Standard makes sense only where you have a specific reason not to inspect TLS.
Three ways to buy
- Term subscription. Buy the appliance and licence together for 1, 3 or 5 years. Only this route fixes your price for the period.
- Own the hardware, licence monthly. Buy the appliance, pay the licence month to month through Nuformat as your MSP.
- Hardware as a Service. Appliance and subscription on one monthly bill with nothing upfront. The MSP owns the hardware and the payments are perpetual.
Ask us and we will price all three together so you can compare properly.
Frequently asked questions
What are the Sophos XGS 108 specifications?
The XGS 108 delivers 12,500 Mbps firewall throughput, 2,500 Mbps IPS, 2,500 Mbps threat protection and 800 Mbps of Xstream TLS inspection, supporting 4,150,000 concurrent connections.
How many users does the XGS 108 support?
Sophos does not publish user counts per model, so we do not quote them. Sizing depends on your internet speed, how many services you enable and how much traffic you inspect. Send us those three and we will size it against the Sophos sizing tool.
Can this appliance be expanded later?
Desktop XGS models cannot be expanded. If you expect to need more ports or 10 Gigabit uplinks, size up now rather than later.
Is Xstream Protection worth the difference over Standard?
Xstream adds TLS 1.3 inspection, cloud sandboxing and the advanced IPS. Since almost all web traffic is encrypted, Standard leaves most of that traffic uninspected. For any site whose users browse the web, Xstream is the bundle that does the work you are buying a firewall for.
Get this quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. We stock the full XGS range. Tell us your user count, internet speed and which services you plan to run, and we will confirm the sizing and reply in two to three business days.
Request a quoteSpecifications as published by Sophos. Pricing and availability confirmed by Nuformat at the time of quotation.