Sophos XGS Firewall

Compare Sophos XGS firewalls and find your fit.

Every Sophos XGS runs the same software and the same protection. What changes across the range is capacity and form factor. Here is how the tiers line up, so you can narrow it down before we size the exact model.

Get sized and quoted Shop all Sophos firewalls
The range at a glance

Four ways to deploy Sophos Firewall.

Small business & branch

Best forSmall offices and branch sites that need full protection in a compact box.
Form factorCompact desktop appliance
DeploymentOn-premises
Compare models

Distributed edge

Best forGrowing and multi-site organizations that need more throughput and headroom.
Form factorDesktop and compact rackmount
DeploymentOn-premises, across sites
Compare models

Enterprise edge

Best forCampuses, data centers, and high-throughput networks.
Form factor1U and 2U rackmount
DeploymentOn-premises core
Compare models

Virtual

Best forVirtualized and cloud environments instead of a hardware appliance.
Form factorSoftware, no appliance
DeploymentVMware, Hyper-V, KVM, AWS, Azure
Compare models
Shared across every tier: Sophos Firewall OS, Sophos Central cloud management, the Xstream architecture, and the same Standard or Xstream Protection options. The tier only changes throughput, connectivity, and form factor, not the features you get.
How to choose

Size it around your network, not the box.

The right model depends on the traffic you actually push and the protections you turn on. Give us the numbers below and we run it through the Sophos sizing tool so you are not over or under buying.

Get a sizing quote
  • How many users and devices sit behind the firewall
  • Your internet bandwidth, now and where it is heading
  • How many sites you need to connect and protect
  • Whether you want Standard or Xstream Protection turned on
  • On-premises hardware, or virtual and cloud instead
Straight answers

Sophos XGS comparison questions.

How do I know which XGS model I need?

It comes down to your number of users, internet bandwidth, how many sites you have, and which protections you want turned on. Tell us your setup and we will size the exact model with the Sophos sizing tool and send a quote.

Do all XGS models have the same features?

Yes. Every tier runs the same Sophos Firewall OS and Sophos Central management, with the same Xstream architecture and the same protection options. The difference is capacity and form factor, not the feature set.

Should I get Standard or Xstream Protection?

Standard covers the core next-gen firewall. Xstream adds full accelerated TLS inspection, DNS Protection, and Active Threat Response with Sophos threat feeds. Most businesses choose Xstream for complete encrypted-traffic visibility.

Can I run Sophos Firewall virtually or in the cloud?

Yes. The virtual editions run on common hypervisors such as VMware, Hyper-V, and KVM, and in cloud platforms including AWS and Microsoft Azure.

Ready when you are

Not sure which XGS fits? We'll size it.

Tell us your users, speeds, and sites, and we'll recommend the right model and license bundle and send a quote.

Talk to an engineer
Get a quote Call