Sophos XGS, small business & branch

Compare Sophos XGS firewalls for small business and branch offices.

These are the current Sophos XGS Gen2 desktop models for small offices and branch sites. Compare their rated throughput side by side, then buy the one that fits.

Get sized and quoted Shop the range

Specs at a glance

The Gen2 small business and branch lineup, side by side.

Every model below is a current Sophos XGS Gen2 desktop appliance. The earlier Gen1 desktop models are end-of-sale and reach end-of-life on September 30, 2030, after which they stop receiving support and security updates, so new deployments should be Gen2. For a Gen1 to Gen2 breakdown, see our post on the Sophos XGS 136 Gen1 vs XGS 138 Gen2 comparison.

Model	FirewallMbps	NGFWMbps	Threat prot.Mbps	IPsec VPNMbps	TLS insp.Mbps	Buy
XGS 88	9,900	2,000	2,000	6,000	600	Buy
XGS 88wWi-Fi	9,900	2,000	2,000	6,000	600	Buy
XGS 108	12,500	2,600	2,500	8,250	800	Buy
XGS 108wWi-Fi	12,500	2,600	2,500	8,250	800	Buy
XGS 118	15,500	3,950	3,250	13,000	1,100	Buy
XGS 118wWi-Fi	15,500	3,950	3,250	13,000	1,100	Buy
XGS 128	19,100	4,350	4,000	15,050	1,450	Buy
XGS 128wWi-Fi	19,100	4,350	4,000	15,050	1,450	Buy
XGS 138	18,100	5,100	4,750	6,600	1,700	Buy

Throughput figures are Sophos rated maximums, shown for comparison. We confirm real-world sizing with you before you buy.

Shared across every model: the same Sophos Firewall OS, Sophos Central cloud management, the Xstream architecture, and the same Standard or Xstream Protection options. The w models add built-in Wi-Fi. These are all Gen2 models; Gen1 desktops are end-of-sale.

How to choose

We size it to your network.

Rated throughput is a starting point, not the whole story. Real-world numbers depend on which protections you turn on. Give us the details and we size the right model so you are not over or under buying.

Get a sizing quote

Users and devices behind the firewall
Internet bandwidth, now and where it is heading
Number of sites to connect and protect
Standard or Xstream Protection

Straight answers

Small business XGS questions.

Are these Gen1 or Gen2 models?

All the models on this page are current Sophos XGS Gen2 desktop appliances. The earlier Gen1 desktop models are end-of-sale and reach end-of-life on September 30, 2030, so we recommend Gen2 for any new purchase. Our blog compares a Gen1 model against its Gen2 successor if you want the details.

How do I read these throughput numbers?

They are Sophos rated maximums, useful for comparing models against each other. Your real-world throughput depends on which protections you enable, so we confirm sizing with you before you buy.

What is the difference between a model and its w version?

The w models, like the XGS 88w, add built-in Wi-Fi so the firewall doubles as your access point. Throughput and features are otherwise the same as the non-w model.

Do these have the same features as the bigger XGS models?

Yes. Every XGS runs the same Sophos Firewall OS and protection. These are sized for smaller networks.

Ready when you are

Not sure which model? We'll size it.

Tell us your users, speeds, and sites, and we'll recommend the right model and license bundle and send a quote.

Talk to an engineer

Get a quote Call