Description
Sophos XGS 2100 with Xstream Protection, 1 year
The Sophos XGS 2100 is a 1U rackmount next-generation firewall built for mid-sized businesses and distributed sites. It inspects encrypted traffic on the appliance itself and is managed from the Sophos cloud console (now becoming Sophos Fusion). It comes with a 1-year Xstream Protection subscription.
Key specifications
| Firewall throughput | 30,000 Mbps |
| IPS throughput | 6,000 Mbps |
| Threat Protection throughput | 5,000 Mbps |
| Concurrent connections | 6,500,000 |
| IPsec VPN throughput | 17,000 Mbps |
| IPsec VPN concurrent tunnels | 5,000 |
Why choose it
- It looks inside encrypted traffic. TLS 1.3 inspection runs on the box, closing the blind spot where most malware hides.
- One console for the whole network. Firewalls, switches, wireless, and endpoints together, with zero-touch deployment.
- Security without the slowdown. The Xstream architecture accelerates deep packet inspection.
- Sized and supported by Nuformat across Canada and the USA, outright or on monthly and HWaaS terms.
What Xstream Protection includes
Xstream Protection is the full Sophos threat stack: intrusion prevention, deep packet inspection, deep-learning malware analysis, real-time cloud sandboxing, TLS 1.3 inspection, DNS protection, and cloud management at no extra cost.
Frequently asked questions
Standard or Xstream Protection? Standard covers the base firewall plus SD-WAN and ZTNA. Xstream adds the full threat stack, including TLS inspection and cloud sandboxing. Most networks want Xstream.
Can I pay monthly instead of a term upfront? Yes. Ask us about monthly licensing and Hardware as a Service (HWaaS) for the XGS 2100.
Is cloud management included? Yes, at no extra cost, through the Sophos console.
Not sure this is the right model? Tell us your user count and internet speed and we will confirm the fit.
Full specifications
Performance
| Firewall throughput | 30,000 Mbps |
| Firewall IMIX | 16,500 Mbps |
| Firewall stationary (64 byte UDP) | 6 μs |
| IPS throughput | 6,000 Mbps |
| Threat Protection throughput | 5,000 Mbps |
| NGFW | 5,200 Mbps |
| Concurrent connections | 6,500,000 |
| New connections/sec | 134,700 |
| IPsec VPN throughput | 17,000 Mbps |
| IPsec VPN concurrent tunnels | 5,000 |
| SSL VPN concurrent tunnels | 2,500 |
| Xstream SSL/TLS Inspection | 1,100 Mbps |
| Xstream SSL/TLS concurrent connections | 18,432 |
Physical Interfaces
| Storage (local quarantine/logs) | Integrated min. 120 GB SATA-III SSD |
| Ethernet interfaces (fixed) | 8 x GE copper 2 x SFP fiber* |
| Bypass port pairs | 1 |
| Management ports | 1 x RJ45 MGMT 1 x COM RJ45 1 x Micro-USB (cable incl.) |
| Other I/O ports | 2 x USB 3.0 (front) 1 x USB 2.0 (rear) |
| Number of FlexiPort slots | 1 |
| FlexiPort modules (optional) | 8-port GE copper 8-port GE SFP fiber 6-port 10G SFP+ 4 port GE copper bypass (2 pairs) 4 port GE copper PoE+4 port GE copper 4 port 2.5 GE copper PoE 2 port GE Fiber (LC) bypass 4 port GE SFP Fiber |
| Max. total port density (incl. use of modules) | 18 |
| Max. Power-over-Ethernet (using FlexiPort module) | 1 module: 4 ports, 60W max. |
| Optional add-on connectivity | SFP, DSL module (VDSL2) SFP/SFP+ Transceivers |
| Display | Multi-function LCD module |
Physical Specifications
| Mounting | 1U rackmount (2 rackmount ears included) |
| Dimensions: Width x height x depth | 438 x 44 x 405 mm |
| Weight | 4.7 kg/10.36 lbs (unpacked) 7 kg/15.43 lbs (packed) |
Environment
| Power supply | Internal auto-ranging AC-DC 100-240VAC, 3-6A@50-60 Hz External Redundant PSU Option |
| Power consumption | 43 W/146.86 BTU/hr (2100 idle) 43 W/153.7 BTU/hr (2300 idle) 162 W/553.5 BTU/hr (2100 max.) 167 W/570.74 BTU/hr (2300 max.) |
| PoE addition enabled | 76 W/260 BTU/hr (max.) |
| Operating temperature | 0°C to 40°C (operating) -20°C to +70°C (storage) |
| Humidity | 10% to 90%, non-condensing |
Product Certifications
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SipPP |
Details
| Xstream Protection Bundle | Available Separately |
| Standard Protection | Available Separately |
| Base Firewall | Network Protection Web Protection DNS Protection Bundle Only Features Zero-Day Protection Central Orchestration Central Firewall Reporting Adv Email Protection Web Server Protection |
Get it from Nuformat
Add it to your cart, or contact Nuformat for a quote sized to your needs. We serve Canada and the USA.