Technical Specifications
XGS 88 Standard Protection
| Performance | |
|---|---|
| Firewall throughput | 9,900 Mbps |
| Firewall IMIX | 6,500 Mbps |
| IPS throughput | 2,000 Mbps |
| Threat protection throughput | 2,000 Mbps |
| NGFW | 2,000 Mbps |
| Concurrent connections | 1,800,000 |
| New connections/sec | 40,500 |
| IPsec VPN throughput | 6,000 Mbps |
| IPsec VPN concurrent tunnels | 500 |
| SSL VPN concurrent tunnels | 500 |
| Xstream SSL/TLS Inspection | 600 Mbps |
| Xstream SSL/TLS concurrent connections | 8,192 |
| Physical Interfaces | |
|---|---|
| Storage | 16 GB eMMC |
| Ethernet interfaces (fixed) | 4 x 2.5 GE copper |
| Management ports | 1 x COM RJ45 1 x Micro-USB (cable incl.) |
| Other I/O ports | 1 x USB 2.0 (front) 1 x USB 3.0 (rear) |
| Number of expansion slots | 0 |
| Optional add-on connectivity | n/a |
| Physical Specifications | |
|---|---|
| Mounting | Rackmount kit available (to be ordered separately) |
| Dimensions: Width x height x depth |
200 x 44 x 180 mm |
| Weight | 1.4 kg/3.08 lbs (unpacked) 2 kg/4.41 lbs (packed) (w-model minimally more) |
| Environment | |
|---|---|
| Power supply | External auto-ranging AC-DC 100-240VAC, 1.7A@50-60 Hz 12VDC, 3.33A, 40W |
| Power consumption (typical) | 12.5 W/42.65 BTU/hr (88 idle) 14.5 W/49.48 BTU/hr (88w idle) 18 W/61.42 BTU/hr (88 max.) 22 W/75.07 BTU/hr (88w max.) |
| Noise level (avg.) | 0 dBA - fanless |
| Operating temperature | 0°C to 40°C (operating) -20°C to +70°C (storage) |
| Humidity | 10% to 90%, non-condensing |
| Product Certifications | |
|---|---|
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, BSMI, RCM, NOM, Anatel*, TEC |
Note: The XGS 88 and 88w do not support some advanced features like on-box reporting, dual AV scanning, WAF AV scanning, and the email message transfer agent (MTA) functionality. If you need these capabilities, the XGS 108(w) is recommended.
| Xstream Protection Bundle | Available Separately | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Standard Protection ($711) 1 - year | Available Separately | |||||||||
| Base Firewall | Network Protection | Web Protection | DNS Protection | Bundle Only Features | Zero-Day Protection | Central Orchestration | Central Firewall Reporting Adv | Email Protection | Web Server Protection | |
| General Management (Incl. HA) | ✓ | |||||||||
| Xstream Architecture | ✓ | |||||||||
| Firewall, Networking and Routing | ✓ | |||||||||
| Xstream SD-WAN | ✓ | |||||||||
| Base Traffic Shaping and Quotas | ✓ | |||||||||
| Secure Wireless | ✓ | |||||||||
| Authentication | ✓ | |||||||||
| Self-Serve User Portal | ✓ | |||||||||
| VPN (IPsec, SSL, etc) | ✓ | |||||||||
| RED Site-to-Site VPN | ✓ | |||||||||
| Sophos Connect VPN Client | ✓ | |||||||||
| Intrusion Prevention (IPS) | ✓ | |||||||||
| Active Threat Response | ✓ | |||||||||
| Sophos X-Ops Threat Feeds | ✓ | |||||||||
| MDR/XDR Threat Feeds | ✓ | |||||||||
| Third Party Threat Feeds | ✓ | |||||||||
| Synchronized Security Heartbeat | ✓ | |||||||||
| SD-RED Device Management | ✓ | |||||||||
| Clientless VPN | ✓ | |||||||||
| Synchronized Application Control | ✓ | |||||||||
| Web Protection and Control | ✓ | |||||||||
| Application Protection and Control | ✓ | |||||||||
| Cloud Application Visibility | ✓ | |||||||||
| Web and App Traffic Shaping | ✓ | |||||||||
| DNS Security and Compliance | ✓ | |||||||||
| Dynamic Sandbox Analysis | ✓ | |||||||||
| Threat Intelligence Analysis | ✓ | |||||||||
| SD-WAN Orchestration | ✓ | |||||||||
| Central Firewall Reporting Data* | 7 Days | 7 Days | 7 Days | 7 Days | 7 Days | 7 Days | 30 Days | Up to 1 Year | 7 Days | 7 Days |
| CFR Advanced Features | ✓ | ✓ | ||||||||
| Email Protection and Control | ✓ | |||||||||
| Email Quarantine Management | ✓ | |||||||||
| Email Encryption and DLP | ✓ | |||||||||
| Web Application Firewall Protection | ✓ | |||||||||
| On-box Logging/Reporting | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Sophos Central Management | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | |
| ZTNA Gateway | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | |
Firewall Brochure Please note: Some feature listings are not supported on XGS 87 and XGS 88 models
(on-box reporting, dual AV scanning, WAF AV scanning and email message transfer agent (MTA) functionality)
Licensing options differ slightly to the above
Data storage duration is an estimate based on average network usage and will vary depending on actual log data volume.
Included with any bundle, support, or protection subscription. Customers with a Base License only must add support to be eligible for these features.