-
Sophos XGS 138 Gen2 with Xstream Protection, 5 year, XX138Z60ZZPCUS
BUY$7,018.35MSRP: $8,126.66 -
Sophos XGS 138 Gen2 with Xstream Protection, 3 year, XX138Z36ZZPCUS
BUY$4,793.21MSRP: $5,550.07 -
Sophos XGS 138 Gen2 with Xstream Protection, 1-year, XX138Z12ZZPCUS
BUY$2,567.36MSRP: $2,972.77 -
Sophos XGS 138 Gen2 Security Appliance
BUY$1,455.50MSRP: $1,684.83 -
Sophos XGS 138 Gen2 with Standard Protection, 1-year subscription, XT138Z12ZZPCUS
BUY$2,311.05MSRP: $2,675.99 -
Sophos XGS 138 Gen2 with Standard Protection, 3-year subscription, XT138Z36ZZPCUS
BUY$4,023.57MSRP: $4,659.02 -
Sophos XGS 138 with Standard Protection, 5-year subscription, XT138Z60ZZPCUS
BUY$5,736.09MSRP: $6,642.05
Sophos XGS 138 firewall
Next-generation firewall delivering 19,100 Mbps firewall throughput and 1,700 Mbps of Xstream TLS inspection. Built for a small site that needs 10 Gigabit uplinks.
Know the exact item? Search above to go straight to it. Or buy from the options below. Comparing models? See every Sophos XGS firewall.
| Metric | Sophos XGS 138 |
|---|---|
| Firewall throughput | 19,100 Mbps |
| IPS throughput | 5,850 Mbps |
| Threat protection throughput | 4,750 Mbps |
| Xstream TLS inspection | 1,700 Mbps |
| IPsec VPN throughput | 6,600 Mbps |
| Concurrent connections | 6,350,000 |
What are the Sophos XGS 138 specifications?+
The XGS 138 delivers 19,100 Mbps firewall throughput, 5,850 Mbps IPS, 4,750 Mbps threat protection and 1,700 Mbps of Xstream TLS inspection, supporting 6,350,000 concurrent connections.
How many users does the XGS 138 support?+
Sophos does not publish user counts per model, so we do not quote them. Sizing depends on your internet speed, how many services you enable and how much traffic you inspect. Send us those three and we will size it against the Sophos sizing tool.
Should I size on firewall throughput or TLS inspection?+
Size on TLS inspection. Almost all web traffic is encrypted, so the 1,700 Mbps TLS figure is what limits real-world inspection. The firewall throughput figure assumes unencrypted traffic you will rarely see.
Standard or Xstream Protection?+
Xstream adds TLS 1.3 inspection, cloud sandboxing and the advanced IPS. For any site whose users browse the web, Xstream is the bundle that inspects encrypted traffic. Standard covers the base firewall plus SD-WAN and ZTNA.
Can this model be expanded later?+
Desktop XGS models cannot be expanded. If you expect to need more ports or 10 Gigabit uplinks, size up now rather than later.

