Description
Sophos XGS 88w Gen2 Security Appliance only
The Sophos XGS 88 is a next-generation firewall delivering 9,900 Mbps firewall throughput and 600 Mbps of Xstream TLS inspection. The w model includes a built-in Wi-Fi radio, so a small site does not need a separate access point. This listing is the appliance.
Size on the TLS inspection figure, not firewall throughput. Almost all web traffic is encrypted, so 600 Mbps is the number that limits what this appliance can actually inspect. The firewall throughput figure assumes unencrypted traffic you will rarely see.
Specifications
Sophos-published figures. Treat throughput as vendor-measured under set conditions.
| Metric | XGS 88 |
|---|---|
| Firewall throughput | 9,900 Mbps |
| IPS throughput | 2,000 Mbps |
| Threat protection throughput | 2,000 Mbps |
| Xstream TLS inspection | 600 Mbps |
| IPsec VPN throughput | 6,000 Mbps |
| Concurrent connections | 1,800,000 |
Standard or Xstream Protection?
| Included | Standard | Xstream |
|---|---|---|
| Firewall, SD-WAN, ZTNA | Yes | Yes |
| TLS 1.3 inspection | No | Yes |
| Cloud sandboxing | No | Yes |
| Advanced IPS | No | Yes |
If your users browse the web, Xstream is the bundle that inspects encrypted traffic. Standard makes sense only where you have a specific reason not to inspect TLS.
Three ways to buy
- Term subscription. Buy the appliance and license together for 1, 3 or 5 years. Only this route fixes your price for the period.
- Own the hardware, license monthly. Buy the appliance, pay the license month to month through Nuformat as your MSP.
- Hardware as a Service. Appliance and subscription on one monthly bill with nothing upfront. The MSP owns the hardware and the payments are perpetual.
Ask us and we will price all three together so you can compare properly.
Who it is for
Small office or branch
A desktop firewall for a single office, store, clinic or branch, managed from the cloud with the rest of your Sophos estate.
Built-in Wi-Fi
The w model adds wireless, so a small site can run firewall and Wi-Fi from one box.
Licensing separately
Buy the hardware now and add Standard or Xstream Protection as a separate subscription, for example to align end dates.
Upgrade path
- Sophos XGS 88w appliance (this listing). Base License: firewall, SD-WAN, VPN and reporting.
- Add Standard or Xstream Protection. Standard adds IPS, web protection and Enhanced Support; Xstream adds zero-day protection, DNS Protection and central orchestration.
- SFP transceivers. Fiber or copper SFP links for the firewall.
- Sophos XGS 108. The next model up, if you need more TLS inspection throughput.
- Sophos MDR. A 24/7 team that uses your firewall data alongside endpoints and email.
All options for the Sophos XGS 88w
Frequently asked questions
What are the Sophos XGS 88 specifications?
The XGS 88 delivers 9,900 Mbps firewall throughput, 2,000 Mbps IPS, 2,000 Mbps threat protection and 600 Mbps of Xstream TLS inspection, supporting 1,800,000 concurrent connections.
How many users does the XGS 88 support?
Sophos does not publish user counts per model, so we do not quote them. Sizing depends on your internet speed, how many services you enable and how much traffic you inspect. Send us those three and we will size it against the Sophos sizing tool.
Can this appliance be expanded later?
Desktop XGS models cannot be expanded. If you expect to need more ports or 10 Gigabit uplinks, size up now rather than later.
Is Xstream Protection worth the difference over Standard?
Xstream adds TLS 1.3 inspection, cloud sandboxing and the advanced IPS. Since almost all web traffic is encrypted, Standard leaves most of that traffic uninspected. For any site whose users browse the web, Xstream is the bundle that does the work you are buying a firewall for.
Compare every model, license, and payment option on our Sophos XGS firewall page.
Get this quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. We stock the full XGS range. Tell us your user count, internet speed and which services you plan to run, and we will confirm the sizing and reply in two to three business days.
Request a quoteSpecifications as published by Sophos. Pricing and availability confirmed by Nuformat at the time of quotation.