Description
Sophos XGS 6500, appliance only
The Sophos XGS 6500 is a 2U rackmount next-generation firewall built for enterprise and campus networks. It inspects encrypted traffic on the appliance itself and is managed from the Sophos cloud console (now becoming Sophos Fusion). This listing is the appliance on its own, so add a Standard or Xstream Protection subscription to switch the security services on.
Key specifications
| Firewall throughput | 120,000 Mbps |
| IPS throughput | 50,750 Mbps |
| Threat Protection throughput | 53,500 Mbps |
| Concurrent connections | 39,900,000 |
| IPsec VPN throughput | 109,800 Mbps |
| IPsec VPN concurrent tunnels | 10,000 |
Why choose it
- It looks inside encrypted traffic. TLS 1.3 inspection runs on the box, closing the blind spot where most malware hides.
- One console for the whole network. Firewalls, switches, wireless, and endpoints together, with zero-touch deployment.
- Security without the slowdown. The Xstream architecture accelerates deep packet inspection.
- Sized and supported by Nuformat across Canada and the USA, outright or on monthly and HWaaS terms.
Choosing a protection subscription
This is the appliance only. Standard Protection covers the base firewall with SD-WAN and ZTNA; Xstream Protection adds the full threat stack.
Frequently asked questions
Standard or Xstream Protection? Standard covers the base firewall plus SD-WAN and ZTNA. Xstream adds the full threat stack, including TLS inspection and cloud sandboxing. Most networks want Xstream.
Can I pay monthly instead of a term upfront? Yes. Ask us about monthly licensing and Hardware as a Service (HWaaS) for the XGS 6500.
Is cloud management included? Yes, at no extra cost, through the Sophos console.
Not sure this is the right model? Tell us your user count and internet speed and we will confirm the fit.
Full specifications
Performance
| Firewall throughput | 120,000 Mbps |
| Firewall IMIX | 60,000 Mbps |
| Firewall Latency (64 byte UDP) | 5 μs |
| IPS throughput | 50,750 Mbps |
| Threat Protection throughput | 53,500 Mbps |
| NGFW | 46,500 Mbps |
| Concurrent connections | 39,900,000 |
| New connections/sec | 496,000 |
| IPsec VPN throughput | 109,800 Mbps |
| IPsec VPN concurrent tunnels | 10,000 |
| SSL VPN concurrent tunnels | 15,000 |
| Xstream SSL/TLS Inspection | 16,000 Mbps |
| Xstream SSL/TLS concurrent connections | 768,000 |
Physical Interfaces
| Storage (local quarantine/logs) | 2 x min. 480 GB SATA-III SSD HW RAID built into CPU |
| Ethernet interfaces (fixed) | 8 x GE copper 12 x SFP+ 10 GE fiber* |
| Bypass port pairs | 2 |
| Management ports | 1 x RJ45 MGMT 1 x COM RJ45 1 x Micro-USB (cable incl.) |
| Other I/O ports | 2 x USB 3.0 (front) |
| Number of Flexi Port slots | 2 + 2 for high-density module |
| Flexi Port modules (optional) | 8 port GE copper 8 port GE SFP fiber 4 port 10 GE SFP+ fiber 4 port GbE copper bypass (2 pairs) 2 port 40 GE QSFP+ fiber 8 port 10 GE SFP+ fiber 2 port GbE Fiber (LC) bypass 4 port GE SFP Fiber 2 port 10 GE Fiber (LC) bypass 4 port 10 GE SFP+ Fiber High-density module (NIC): 12 port GE copper • 4 port 2.5 GE copper |
| Max. total port density (incl. use of modules) | 68 |
| Optional add-on connectivity | SFP, DSL module (VDSL2) SFP/SFP+ Transceivers |
| Display | Multi-function LCD module |
Physical Specifications
| Mounting | 2U sliding rails (included) |
| Dimensions: Width x height x depth | 438 x 88 x 545 mm |
| Weight | 17.8 kg/39.24 lbs (unpacked) 27 kg/59.52 lbs (packed) |
Environment
| Power supply | 2 x hot-swap Internal auto-ranging 100-240VAC, 50-60 Hz PSU |
| Power consumption | 188.00 W/642.13 BTU/h (idle) 487.09 W/1663.78 BTU/h (max.) |
| Operating temperature | 0°C to 40°C (operating) -20°C to +70°C (storage) |
| Humidity | 10% to 90%, non-condensing |
Product Certifications
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, BSMI, RCM, NOM, Anatel, KC, CCC, SipPP Planned: TEC |
Details
| Xstream Protection Bundle | Available Separately |
| Standard Protection | Available Separately |
| Base Firewall | Network Protection Web Protection DNS Protection Bundle Only Features Zero-Day Protection Central Orchestration Central Firewall Reporting Adv Email Protection Web Server Protection |
Get it from Nuformat
Add it to your cart, or contact Nuformat for a quote sized to your needs. We serve Canada and the USA.