Description
Sophos XGS 2100 with Xstream Protection, 3-year subscription, IG2A3CSUS
The Sophos XGS 2100 is a next-generation firewall delivering 30,000 Mbps firewall throughput and 1,100 Mbps of Xstream TLS inspection. This listing is the appliance with 3 year Xstream Protection.
Size on the TLS inspection figure, not firewall throughput. Almost all web traffic is encrypted, so 1,100 Mbps is the number that limits what this appliance can actually inspect. The firewall throughput figure assumes unencrypted traffic you will rarely see.
Specifications
Sophos-published figures. Treat throughput as vendor-measured under set conditions.
| Metric | XGS 2100 |
|---|---|
| Firewall throughput | 30,000 Mbps |
| IPS throughput | 6,000 Mbps |
| Threat protection throughput | 5,000 Mbps |
| Xstream TLS inspection | 1,100 Mbps |
| IPsec VPN throughput | 17,000 Mbps |
| Concurrent connections | 6,500,000 |
Standard or Xstream Protection?
| Included | Standard | Xstream |
|---|---|---|
| Firewall, SD-WAN, ZTNA | Yes | Yes |
| TLS 1.3 inspection | No | Yes |
| Cloud sandboxing | No | Yes |
| Advanced IPS | No | Yes |
If your users browse the web, Xstream is the bundle that inspects encrypted traffic. Standard makes sense only where you have a specific reason not to inspect TLS.
Three ways to buy
- Term subscription. Buy the appliance and licence together for 1, 3 or 5 years. Only this route fixes your price for the period.
- Own the hardware, licence monthly. Buy the appliance, pay the licence month to month through Nuformat as your MSP.
- Hardware as a Service. Appliance and subscription on one monthly bill with nothing upfront. The MSP owns the hardware and the payments are perpetual.
Ask us and we will price all three together so you can compare properly.
Frequently asked questions
What are the Sophos XGS 2100 specifications?
The XGS 2100 delivers 30,000 Mbps firewall throughput, 6,000 Mbps IPS, 5,000 Mbps threat protection and 1,100 Mbps of Xstream TLS inspection, supporting 6,500,000 concurrent connections.
How many users does the XGS 2100 support?
Sophos does not publish user counts per model, so we do not quote them. Sizing depends on your internet speed, how many services you enable and how much traffic you inspect. Send us those three and we will size it against the Sophos sizing tool.
Can this appliance be expanded later?
Rackmount XGS models have one Flexi Port bay that takes an expansion module, including 10 Gigabit fibre, PoE and high-density copper options.
Is Xstream Protection worth the difference over Standard?
Xstream adds TLS 1.3 inspection, cloud sandboxing and the advanced IPS. Since almost all web traffic is encrypted, Standard leaves most of that traffic uninspected. For any site whose users browse the web, Xstream is the bundle that does the work you are buying a firewall for.
XGS 2100 buying guide · XGS 2100 vs the alternatives · Compare all XGS models
Get this quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. We stock the full XGS range. Tell us your user count, internet speed and which services you plan to run, and we will confirm the sizing and reply in two to three business days.
Request a quoteSpecifications as published by Sophos. Pricing and availability confirmed by Nuformat at the time of quotation.