Sophos Xg Series Appliances Brna_2 Brna 2
User Manual: sophos-xg-series-appliances-brna_2
Open the PDF directly: View PDF 
.
Page Count: 19
Sophos XG Firewall
Unrivalled simplicity, security and insight
Sophos XG Firewall brings a fresh new approach to the way you
manage your firewall, respond to threats, and monitor what’s
happening on your network. Get ready for a whole new level of
simplicity, security and insight.
Sophos XG Firewall – The next thing in next-gen
XG Firewall is optimized for today’s business, delivering all the protection and
insights you need in a single, powerful appliance that’s easy to manage.
Advanced protection made simple
Most firewall products make you set up and manage policies
across multiple modules or screens. Not Sophos. We provide
a powerful unified policy model that allows you to manage,
view, filter, and sort all your user, application and network
policies on a single screen.
More-in-one protection
You get all the next-gen firewall features you need plus
features you can’t get anywhere else – including our
revolutionary Security Heartbeat™, full web application
firewall, and complete email anti-spam, encryption and DLP.
No extra hardware. No extra cost. Simply choose what you
want to deploy.
On-box reports included as standard
With hundreds of built-in reports you’ll know exactly what’s
happening with your users and your network. You get detailed
reports as standard, stored locally with no separate tools
required. And our unique User Threat Quotient reports show
you which of your users are putting your security at risk.
Potent, powerful … fast
We’ve engineered XG Firewall to deliver outstanding
performance. Our appliances are built using Intel multi-
core technology, solid-state drives, and accelerated in-
memory content scanning. In addition Sophos FastPath
packet optimization technology ensures you’ll always get
maximum throughput.
Simply manage multiple firewalls
Sophos Firewall Manager provides a single console for the
complete central management of multiple XG Firewalls.
And if you also want to consolidate reporting across
multiple XG, SG, and Cyberoam appliances then with
Sophos iView, you can.
Sophos XG Firewall
1
Security features you can’t get anywhere else
XG Firewall includes a number of innovations that not only makes your job a lot
easier, but also ensures your network is more secure.
A revolution in advanced threat protection –
Sophos Synchronized Security
An industry first, Synchronized Security links your endpoints
and your firewall to enable unique insights and coordination.
Security HeartbeatTM relays Endpoint health status and
enables your firewall to immediately identify and respond
to a compromised system on your network. The firewall can
isolate systems until they can be investigated and cleaned
up. Another Synchronized Security feature, Dynamic App
Identification, also enables the firewall to query the endpoint
to determine the source of unknown traffic on the network.
Patented Layer-8 identity control
User identity takes enforcement to a whole new layer with
our patented Layer-8 identity based policy technology
enabling user level controls over applications, bandwidth and
other network resources regardless of IP-address, location,
network or device. It literally takes firewall policy to a whole
new layer.
XG Series Virtual AzureSoftware
Purpose-built devices
to provide the ultimate
in performance.
Install the Sophos Firewall
OS image on your own
Intel hardware or server.
Install on VMware,
Citrix, Microsoft
Hyper-V and KVM.
Protect your network
infrastructure in the
Azure cloud.
Policy templates get you protected fast
Pre-defined policy templates let you protect common
applications like Microsoft Exchange or SharePoint quickly
and easily. Simply select them from a list, provide some
basic information and the template takes care of the rest.
It sets all the inbound/ outbound firewall rules and security
settings for you automatically – displaying the final policy in
a statement in plain English.
Automated user risk reports
The Sophos User Threat Quotient (UTQ) indicator is a unique
feature which provides actionable intelligence on user
behavior. Our firewall correlates each user’s surfing habits
and activity with advanced threat triggers and history to
identify users with risk-prone behavior.
Flexible deployment, no compromise
Unlike our competitors whether you choose hardware,
software, or virtual we don’t make you compromise – every
feature is available on every model and form- factor.
To find out more visit www.sophos.com/xgfirewall
Sophos XG Firewall
2
Network Protection
All the protection you need to stop sophisticated attacks and advanced threats
while providing secure network access to those you trust.
Web Protection
Comprehensive web protection and application control with powerful and
flexible policy tools ensure your networked users are secure and productive.
Next-gen Intrusion Prevention System
Provides advanced protection from all types of modern
attacks. It goes beyond traditional server and network
resources to protect users and apps on the network as well.
Advanced Threat Protection
Instant identification and immediate response to today’s
most sophisticated attacks. Multi-layered protection
identifies threats instantly and Security Heartbeat™
provides an emergency response.
Security Heartbeat
Creates a link between your Sophos Cloud Endpoints and
your Firewall to identify threats faster, simplify investigation
and minimize impact from attacks. Easily incorporate
Heartbeat status into firewall policies to automatically
isolate compromised systems.
Advanced VPN technologies
Adds unique and simple VPN technologies including our
clientless HTML5 self-service portal that makes remote
access incredibly simple or utilize our exclusive light-weight
secure RED (Remote Ethernet Device) VPN technology.
Powerful user and group web policy
Provides enterprise-level Secure Web Gateway policy
controls to easily manage sophisticated user and group
web controls.
Advanced Web Threat Protection
Backed by SophosLabs, our advanced engine provides
the ultimate protection from today’s polymorphic and
obfuscated web threats. Innovative techniques like
JavaScript emulation, behavioral analysis, and origin
reputation help keep your network safe.
It integrates with your XG Firewall and is cloud-delivered
so there’s no additional hardware required. Sophos
Sandstorm blocks evasive threats like ransomware,
disguised as executables, PDFs, and Microsoft Office
documents — sending them to a cloud-sandbox to be
detonated and observed in a safe environment.
High performance transparent proxy
Optimized for top performance, our transparent proxy
technology provides ultra-low latency inspection and
HTTPS scanning of all traffic for threats and compliance.
Layer-8 Application Control and QoS
Enables user-aware visibility and control over thousands of
applications with granular policy and traffic-shaping (QoS)
options based on application category, risk, and
other characteristics.
Sandstorm Protection
Sophos Sandstorm uses next-gen cloud-sandbox technology to give your
organization an extra layer of security against ransomware and targeted
attacks.
Threat intelligence is fed back to your XG Firewall and the
file blocked or permitted. The process takes just a couple
of minutes with minimal impact for the user. And
Sandstorm gives you detailed threat reports for
every incident so you know exactly what’s going on.
Sophos XG Firewall
3
Email Protection
Full SMTP and POP message protection from spam, phishing and data loss
with our unique all-in-one protection that combines policy-based email
encryption with DLP and anti-spam.
Web Server Protection
Harden your web servers and business applications against hacking attempts
with a full-featured Web Application Firewall while providing secure access with
reverse proxy authentication.
Integrated Message Transfer Agent
Ensures always-on business continuity for your email,
allowing the firewall to automatically queue mail in the
event servers become unavailable.
Live Anti-Spam
Provides protection from the latest spam campaigns,
phishing attacks, and malicious attachments .
Self-serve Quarantine
Gives employees direct control over their spam quarantine,
saving you time and effort.
SPX Email Encryption
Unique to Sophos, SPX makes it easy to send encrypted
email to anyone, even those without any kind of trust
infrastructure using our patent-pending password-based
encryption technology.
Data Loss Prevention
Policy based DLP can automatically trigger encryption or
block/notify based on the presence of sensitive data in
emails leaving the organization.
Business Application Policy Templates
Pre-defined policy templates let you protect common
applications like Microsoft Exchange Outlook Anywhere or
SharePoint quickly and easily.
Protection from the latest hacks and
attacks
With a variety of advanced protection technologies
including URL and form hardening, deep-linking and
directory traversal prevention, SQL injection and cross-site
scripting protection, cookie signing and more.
Reverse proxy
With authentication options, SSL offloading, and server load
balancing ensure maximum protection and performance
for your servers being accessed from the internet.
Sophos XG Firewall
4
Network Protection Web ProtectionSandstorm Protection
All the protection you need to stop
sophisticated attacks and advanced
threats while providing secure
network access to those you trust.
Sophos Sandstorm uses next-gen
cloud-sandbox technology to give
your organization an extra layer
of security against ransomware
and targeted attacks.
Comprehensive web protection and
application control with powerful and
flexible policy tools ensure your networked
users are secure and productive.
Security Heartbeat™ Web Server ProtectionEmail Protection
Links your Sophos endpoints with
your firewall to deliver unparalleled
protection from advanced threats
and reduce the time and complexity
of responding to security incidents.
Full SMTP and POP message protection
from spam, phishing and data loss
with our unique all-in-one protection
that combines policy-based email
encryption with DLP and anti-spam.
Harden your web servers and
business applications against
hacking attempts while providing
secure access to external users
with reverse proxy authentication.
Sophos XG Firewall
5
How to Buy
Every XG Firewall comes equipped with Base Firewall functionality including
IPSec, SSL VPN, and Wireless Protection. You can extend protection with our
Total Protection bundles or by adding protection modules individually.
A simple approach to comprehensive support
We build products that are simple yet comprehensive. And, we take the same approach with our support. With options
ranging from basic technical support to those including direct access to senior support engineers and customized delivery.
Licenses names
Standard
Included with purchase
Enhanced
Included in all bundles
Enhanced Plus
Support
Via telephone and email
For 90 days
(business hours only)
Included
(24x7)
VIP Access
(24x7)
Security Updates & Patches
For the life of the product
Included with an active
software subscription
Included with an active
software subscription
Included with an active
software subscription
Software Feature Updates & Upgrades Included 90-days Included Included
Consulting
Remote consultation on your firewall configuration and
security with a Sophos Senior Technical Support Engineer
Included
(up to 4 hours)
Warranty and RMA
For all hardware appliances
1 year (return / replace) Advance Exchange
(max. 5 years)
Advance Exchange
(max. 5 years)
Technical Account Manager
Dedicated named technical account manager
Optional
(extra cost)
Optional
(extra cost)
Sophos XG Firewall
6
Sophos XG Series Appliances – at a glance
Our XG Series hardware appliances are purpose-built with the latest multi-core Intel technology, generous RAM
provisioning, and solid-state storage. Whether you’re protecting a small business or a large datacenter, you’re getting
industry leading performance.
Product Matrix
Model Tech. Specs Throughput¹
Revision # Form
Factor
Ports/Slots
(Max Ports)
w-model 802.11
wireless
Swappable
Components
Firewall
(Mbps)
VPN
(Mbps)
NGFW
(Mbps)
AV-proxy
(Mbps)
XG 85(w) 1 desktop 4 a/b/g/n n/a 2000 200 235 330
XG 105(w) 2 desktop 4 a/b/g/n n/a 3000 300 270 430
XG 115(w) 2 desktop 4 a/b/g/n n/a 3,500 350 310 520
XG 125(w) 2 desktop 8 a/b/g/n/ac n/a 5,000 410 360 590
XG 135(w) 2 desktop 8 a/b/g/n/ac n/a 7,000 950 880 1,400
XG 210 31U 8/1 (16) n/a opt. ext. Power 16,000 1,450 2,200 2,300
XG 230 21U 8/1 (16) n/a opt. ext. Power 20,000 1,700 3,000 2,800
XG 310 21U 12/1 (20) n/a opt. ext. Power 28,000 2,750 4,000 3,300
XG 330 21U 12/1 (20) n/a opt. ext. Power 33,000 3,200 5,500 6,000
XG 430 21U 10/2 (26) n/a opt. ext. Power 41,000 4,800 6,000 6,500
XG 450 21U 10/2 (26) n/a opt. int. Power 50,000 5,500 7,500 7,000
XG 550 2 2U 8/4 (32) n/a Power, SSD, Fan 65,000 8,400 9,000 10,000
XG 650 2 2U 8/6 (48) n/a Power, SSD, Fan 85,000 9,000 10,000 13,000
XG 750 2 2U 8/8 (64) n/a Power, SSD, Fan 100,000 11,000 11,800 17,000
Sophos XG Firewall TotalProtect Plus Bundle
For the ultimate in protection, value, and peace-of-mind, get our convenient TotalProtect Plus bundle.
What you get TotalProtect Plus Bundle
Base Firewall Firewall, IPsec and SSL VPN, Wireless Protection (APs sold separately)
Network Protection IPS, RED, HTML5 VPN, ATP, Security Heartbeat
Web Protection Anti-malware, Web and App visibility, control, and protection
Email Protection Anti-spam, SPX Email Encryption, and DLP
Web Server Protection Web Application Firewall and reverse proxy
Sandstorm Protection next-gen cloud-sandbox technology
Enhanced Support 24x7 support, security and software updates, adv. exchange warranty
XG Series Hardware Appliance Multi-core Intel processor, solid-state storage, flexible connectivity
Sophos XG Firewall
7
Sophos XG Series Desktop Appliances:
XG 85 and XG 85w
Technical Specifications
These entry-level desktop firewalls are the ideal choice for budget-conscious small businesses, retail and small or home
offices. They are available with and without integrated wireless LAN, so you can have an all-in-one network security and
hotspot solution without the need for additional hardware. The Intel dual-core technology makes them highly efficient and
as they’re fanless, they won’t add unwanted noise to your office space.
Note: The XG 85 and 85w do not support some advanced features like on-box reporting, dual AV scanning, WAF AV scanning
and the email message transfer agent (MTA) functionality. If you need these capabilities, the XG 105(w) is recommended.
Performance¹ XG 85(w) Rev. 1
Firewall throughput 2 Gbps
Firewall IMIX 780 Mbps
VPN throughput 200 Mbps
IPS throughput 510 Mbps
NGFW (IPS + App Ctrl +
WebFilter) max.
235 Mbps
Antivirus throughput (proxy) 330 Mbps
Concurrent connections 2,000,000
New connections/sec 18,000
Maximum licensed users unrestricted
Wireless Specification (XG 85w only)
No. of antennas 2 external
MIMO capabilities 2 x 2:2
Wireless interface 802.11a/b/g/n (2.4 GHz / 5 GHz)
Physical interfaces
Storage 8 GB eMMC
Ethernet interfaces (fixed) 4 GE copper
I/O ports (rear) 2 x USB 2.0
1 x COM (RJ45)
Power supply External auto ranging DC: 12V,
100-240VAC, 50-60 Hz
Physical specifications
Mounting Rackmount kit available
(to be ordered separately)
Dimensions
Width x Depth x Height
225 x 150 x 44 mm
8.86 x 5.91 x 1.73 inches
Weight 0.95 kg / 2.09 lbs (unpacked)
1.97 kg / 4.34 lbs (packed)
Front View
Back View
Environment
Power consumption 3.24W, 11.04 BTU/h (idle)
5.64W, 19.232 BTU/h (full load)
Operating temperature 0-40°C (operating)
-20 to +80°C (storage)
Humidity 10%-90%, non-condensing
Product Certifications
Certifications CB, CE, FCC Class B, IC, VCCI,
MIC, RCM, UL, CCC
Status LEDs
4 x 1GbE
copper port
1 x COM
(RJ45)
2 x USB 2.0
2 x external antennas
(XG 85w only)
Sophos XG Firewall
8
Sophos XG Series Desktop Appliances:
XG 105, XG 105w, XG 115, XG 115w
Technical Specifications
These desktop firewall appliances offer an excellent price-to-performance ratio making them ideal for small businesses
or branch offices. They are available with or without integrated wireless LAN, so you can even have an all-in-one network
security and hotspot solution without the need for additional hardware. Of course, you can also add external access points.
With Intel multi-core technology designed for best performance and efficiency in a small form factor, these models come
equipped with 4 GbE copper ports built-in.
Front View
Back View
Environment
Power consumption 4.83W, 16.468 BTU/hr (idle)
9.84W, 33.55 BTU/hr (full load)
Operating temperature 0-40°C (operating)
-20 to +80°C (storage)
Humidity 10%-90%, non-condensing
Product Certifications
Certifications CB, CE, FCC Class B, IC, VCCI,
MIC, RCM, UL, CCC
Performance¹ XG 105(w) Rev. 2 XG 115(w) Rev. 2
Firewall throughput 3 Gbps 3.5 Gbps
Firewall IMIX 1.04 Gbps 1.33 Gbps
VPN throughput 300 Mbps 350 Mbps
IPS throughput 700 Mbps 900 Mbps
NGFW (IPS + App Ctrl +
WebFilter) max.
270 Mbps 310 Mbps
Antivirus throughput (proxy) 430 Mbps 520 Mbps
Concurrent connections 3,200,000 6,000,000
New connections/sec 27,500 27,500
Maximum licensed users unrestricted unrestricted
Wireless Specification (XG 105w and XG 115w only)
No. of antennas 3 external
MIMO capabilities 3 x 3:3
Wireless interface 802.11a/b/g/n (2.4 GHz / 5 GHz)
Physical interfaces
Storage (local
quarantine/logs)
integrated SSD
Ethernet interfaces (fixed) 4 GE copper
I/O ports (rear) 2 x USB 2.0
1 x COM (RJ45)
1 x VGA
Power supply External auto ranging DC: 12V,
100-240VAC, 50-60 Hz
Physical specifications
Mounting Rackmount kit available
(to be ordered separately)
Dimensions
Width x Depth x Height
225 x 150 x 44 mm
8.86 x 5.91 x 1.73 inches
Weight 1.19 kg / 2.62 lbs (unpacked)
2.185 kg / 4.82 lbs (packed)
Status LEDs
2 x USB 2.0
3 x external antennas
(XG 105w and XG 115w only)
1 x VGA
port
4 x 1GbE
copper port
1 x COM
(RJ45)
Sophos XG Firewall
9
Front View
Back View
Environment
Power consumption 12.46W, 49.3 BTU/hr (idle)
26.16W, 89.2 BTU/hr (full load)
Operating temperature 0-40°C (operating)
-20 to +80°C (storage)
Humidity 10%-90%, non-condensing
Product Certifications
Certifications CB, CE, FCC Class B, IC, VCCI,
MIC, RCM, UL, CCC
Sophos XG Series Desktop Appliances:
XG 125, XG 125w, XG 135, XG 135w
Technical Specifications
These powerful firewall appliances offer 1U performance with a desktop form factor and price. If you have a small business
or branch offices to protect and are working on a tight budget, these models are the ideal choice. They are also available
with integrated 802.11ac wireless LAN for optimal coverage and connectivity for your mobile workers. Built upon the latest
Intel architecture, our software makes optimal use of the multi-core technology to provide excellent throughput for all your
key processes. These models come equipped with 8 GbE copper ports built-in.
Performance¹ XG 125(w) Rev. 2 XG 135(w) Rev. 2
Firewall throughput 5 Gbps 7 Gbps
Firewall IMIX 1.75 Gbps 2.75 Gbps
VPN throughput 410 Mbps 950 Mbps
IPS throughput 1 Gbps 1.75 Gbps
NGFW (IPS + App Ctrl +
WebFilter) max.
360 Mbps 880 Mbps
Antivirus throughput (proxy) 590 Mbps 1.4 Gbps
Concurrent connections 6,200,000 8,200,000
New connections/sec 35,000 82,000
Maximum licensed users unrestricted unrestricted
Wireless Specification (XG 125w and XG 135w only)
No. of antennas 3 external
MIMO capabilities 3 x 3:3
Wireless interface 802.11a/b/g/n/ac (2.4 GHz / 5 GHz)
Physical interfaces
Storage (local
quarantine/logs)
integrated SSD
Ethernet interfaces (fixed) 8 GE copper
I/O ports (rear) 2 x USB 2.0
1 x COM (RJ45)
1 x VGA
Power supply External auto ranging DC: 12V,
100-240VAC, 50-60 Hz
Physical specifications
Mounting Rackmount kit available
(to be ordered separately)
Dimensions
Width x Depth x Height
288 x 186.8 x 44 mm
11.38 x 7.35 x 1.73 inches
Weight 1.7 kg / 3.75 lbs (unpacked)
2.82 kg / 6.22 lbs (packed)
8 x 1GbE copper port
1 x COM (RJ45)
3 x external antennas
(XG 125w and XG 135w only)
1 x VGA port
Status LEDs
2 x USB 2.0
Sophos XG Firewall
10
Sophos XG Series Rackmount Appliances:
XG 210, XG 230
Technical Specifications
The Sophos XG 210 and XG 230 are designed to protect small to mid-sized businesses and branch offices. Based on the
latest Intel technology and equipped with 6 GbE copper ports , 2 GbE SFP fiber ports plus one FleXi Port slot to configure
with an optional module, they provide high flexibility and throughput at an excellent price-to-performance ratio. An external
redundant power supply is optional for these models.
Performance¹ XG 210 Rev. 3 XG 230 Rev. 2
Firewall throughput 16 Gbps 20 Gbps
Firewall IMIX 5.5 Gbps 6.8 Gbps
VPN throughput 1.45 Gbps 1.7 Gbps
IPS throughput 2.7 Gbps 4.2 Gbps
NGFW (IPS + App Ctrl) max. 2.2 Gbps 3 Gbps
Antivirus throughput (proxy) 2.3 Gbps 2.8 Gbps
Concurrent connections 8,200,000 8,200,000
New connections/sec 135,000 140,000
Maximum licensed users unrestricted unrestricted
Physical interfaces
Storage (local
quarantine/logs)
integrated SSD
Ethernet interfaces (fixed) 6 GE copper (incl. 2 bypass pairs)
2 GE SFP*
No. of FleXi Port slots 1
FleXi Port modules (optional) 8 port GE copper
8 port GE SFP*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
2 port 40 GE QSFP+*
4 port GE PoE
8 port GE PoE
4 port GE copper LAN bypass
I/O ports 2 x USB 3.0 (front)
1 x Micro USB (front)
1 x USB 3.0 (rear)
1 x COM (RJ45) (front)
1 x HDMI (rear)
Display Multi-function LCD module
Power supply Internal auto-ranging
100-240VAC, 50-60 Hz
Redundant PSU optional (external)
Physical specifications
Mounting 1U rack mount
(2 rackmount ears included)
Dimensions
Width x Depth x Height
438 x 344.4 x 44mm
17.24 x 13.56 x 1.75 inches
Weight 5.2 kg / 11.46lb (unpacked)
7.7 kg / 16.98 lbs (packed)
* Transceivers (mini GBICs) sold separately
Front View
Back View
Environment
Power consumption XG 210: 19W, 65 BTU/hr (idle)
35W, 119 BTU/hr (full load)
XG 230: 21W, 72 BTU/hr (idle)
41W, 141 BTU/hr (full load)
Operating temperature 0-40°C (operating)
-20 to +80°C (storage)
Humidity 10%-90%, non-condensing
Product Certifications
Certifications CB, UL, CE, FCC Class A,
ISED, VCCI, RCM, CCC
BIS (planned), MSIP/KCC (planned)
1 x COM
(RJ45)
2 x
USB 3.0
2 x GE SPF
– fixed
6 x GE copper – fixed
Incl. 2 bypass pairs
1 x
USB 3.0
Power supply
Power switch
Navigation
for LCD
1 x expansion bay
(shown here with optional
FleXi Port module)
Micro USB
HDMIConnector for
optional PoE Power
Connector for optional 2nd
external power supply
Multi-function
LCD display
Sophos XG Firewall
11
Sophos XG Series Rackmount Appliances:
XG 310, XG 330
Technical Specifications
The Sophos XG 310 and XG 330 are scalable appliances suitable for distributed organizations or mid-sized companies.
With solid-state drives for on-box reporting, logs and spam quarantine, they’re highly responsive even in high traffic
environments. Each model is equipped with 8 GbE copper ports, 2 GbE SFP fiber ports, 2 10 GbE SFP+ fiber ports plus one
FleXi Port slot to configure with an optional module. They provide optimal performance and flexibility plus redundancy
through an optional external power supply.
Performance¹ XG 310 Rev. 2 XG 330 Rev. 2
Firewall throughput 28 Gbps 33 Gbps
Firewall IMIX 9.5 Gbps 12.5 Gbps
VPN throughput 2.75 Gbps 3.2 Gbps
IPS throughput 5.5 Gbps 8.5 Gbps
NGFW (IPS + App Ctrl) max. 4 Gbps 5.5 Gbps
Antivirus throughput (proxy) 3.3 Gbps 6 Gbps
Concurrent connections 17,500,000 17,500,000
New connections/sec 200,000 200,000
Maximum licensed users unrestricted unrestricted
Physical interfaces
Storage (local
quarantine/logs)
integrated SSD
Ethernet interfaces (fixed) 8 GE copper (incl. 2 bypass pairs)
2 GE SFP*
2 10 GE SFP+*
No. of FleXi Port slots 1
FleXi Port modules (optional) 8 port GE copper
8 port GE SFP*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
2 port 40 GE QSFP+*
4 port GE PoE
8 port GE PoE
4 port GE copper LAN bypass
I/O ports 2 x USB 3.0 (front)
1 x Micro USB (front)
1 x USB 3.0 (rear)
1 x COM (RJ45) (front)
1 x HDMI (rear)
Display Multi-function LCD module
Power supply Internal auto-ranging
100-240VAC, 50-60 Hz
Redundant PSU optional (external)
Physical specifications
Mounting 1U rack mount
(2 rackmount ears included)
Dimensions
Width x Depth x Height
438 x 405.5 x 44mm
17.24 x 15.96 x 1.75 inches
Weight 5.8 kg / 12.78 lbs (unpacked)
8.8 kg / 19.4 lbs (packed)
* Transceivers (mini GBICs) sold separately
Front View
Back View
Environment
Power consumption XG 310: 32W, 109 BTU/hr (idle)
49W, 167 BTU/hr (full load)
XG 330: 36W, 122 BTU/hr (idle)
54W, 184 BTU/hr (full load)
Operating temperature 0-40°C (operating)
-20 to +80°C (storage)
Humidity 10%-90%, non-condensing
Product Certifications
Certifications CB, UL, CE, FCC Class A,
ISED, VCCI, RCM, CCC
BIS (planned), MSIP/KCC (planned)
1 x COM
(RJ45)
2 x
USB 3.0
2 x 10 GE
SPF+ – fixed
8 x GE copper – fixed
Incl. 2 bypass pairs
1 x
USB 3.0
Power supply
Power switch
1 x expansion bay
(shown here with optional
FleXi Port module)
Micro USB
HDMIConnector for
optional PoE Power
Connector for optional 2nd
external power supply
Navigation
for LCD
Multi-function
LCD display
2 x GE SPF
– fixed
Sophos XG Firewall
12
Sophos XG Series Rackmount Appliances:
XG 430, XG 450
Technical Specifications
The Sophos XG 430 and XG 450 offer enterprise performance for distributed organizations or larger mid-sized companies.
The connectivity options are second to none for rack mountable appliances, with each model coming equipped with 8 GbE
copper ports, 2 10 GbE SFP+ ports and 2 additional FleXi Port slots which you can configure with your choice of optional
modules. For high-availability, the XG 450 also offers unparalleled redundancy features in a 1U appliance with a second SSD
(RAID) integrated and an optional second power supply is available for both models.
Performance¹ XG 430 Rev. 2 XG 450 Rev. 2
Firewall throughput 41 Gbps 50 Gbps
Firewall IMIX 14.5 Gbps 17.5 Gbps
VPN throughput 4.8 Gbps 5.5 Gbps
IPS throughput 9 Gbps 10 Gbps
NGFW (IPS + App Ctrl) max. 6 Gbps 7.5 Gbps
Antivirus throughput (proxy) 6.5 Gbps 7 Gbps
Concurrent connections 20,000,000 20,000,000
New connections/sec 200,000 200,000
Maximum licensed users unrestricted
Physical interfaces
Storage (local
quarantine/logs)
integrated SSD 2 x integrated SSD
Ethernet interfaces (fixed) 8 GE copper (incl. 2 bypass pairs)
2 10 GE SFP+*
No. of FleXi Port slots 2
FleXi Port modules (optional) 8 port GE copper
8 port GE SFP*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
2 port 40 GE QSFP+*
4 port GE PoE
8 port GE PoE
4 port GE copper LAN bypass
I/O ports 2 x USB 3.0 (front)
1 x Micro USB (front)
1 x USB 3.0 (rear)
1 x COM (RJ45) (front)
1 x IPMI (front)
1 x HDMI (rear)
Display Multi-function LCD module
Power supply Internal auto-
ranging 100-
240VAC, 50-60 Hz
Redundant PSU
optional (external)
Internal auto-
ranging 100-
240VAC, 50-60 Hz
Hot Swap
Redundant PSU
optional (internal)
Physical specifications
Mounting 1U rackmount (sliding rails incl.)
Dimensions
Width x Depth x Height
438 x 507.7 x 44mm
17.24 x 19.99 x 1.75 inches
Weight 7.6 kg / 16.76 lbs
(unpacked)
13.7 kg / 30.2
lbs (packed)
7.8 kg / 17.2 lbs
(unpacked)
14.8 kg / 32.63
lbs (packed)
* Transceivers (mini GBICs) sold separately
Front View
Back View XG 430
Back View XG 450
Environment
Power consumption XG 430: 28W, 96 BTU/hr (idle)
79W, 270 BTU/hr (full load)
XG 450: 31W, 107 BTU/hr (idle)
83W, 283 BTU/hr (full load)
Operating temperature 0-40°C (operating)
-20 to + 80°C (storage)
Humidity 10%-90%, non-condensing
Product Certifications
Certifications CB, UL, CE, FCC Class A,
ISED, VCCI, RCM, CCC
BIS (planned), MSIP/KCC (planned)
1 x COM
(RJ45)
2 x
USB 3.0
8 x GE copper – fixed
Incl. 2 bypass pairs
2 x expansion bay
(shown here with optional
FleXi Port module)
Micro USBNavigation
for LCD
Multi-function
LCD display
2 x GE SPF+
– fixed
IPMI
MGMT
port
1 x
USB 3.0
Power supply
Power switchHDMIConnector for
optional PoE Power
Connector for optional 2nd
external power supply
1 x
USB 3.0
Power supply
Space for optional 2nd hot
swappable power supply
HDMIConnector for
optional PoE Power
Power switch
Sophos XG Firewall
13
Sophos XG Series Rackmount Appliances:
XG 550, XG 650
Technical Specifications
The Sophos XG 550 and XG 650 are high-performance firewalls equipped to provide protection for larger distributed and
growing organizations. They offer CPU technology to effortlessly handle use as an all-in-one solution or a powerful next-
generation firewall. The models offer either 4 (XG 550) or 6 (XG 650) FleXi Port expansion bays to tailor your connectivity to
your environment. An 8 port GbE copper module is supplied as a default. Hot-swappable dual SSDs and power supplies are
standard redundancy features in this class.
Front View XG 550
Front View XG 650
Back View
Environment
Power consumption XG 550: 270.5W, 922.98BTU/hr (idle)
416.1W, 1419.79BTU/hr (full load)
XG 650: 320.5W, 1093.59BTU/hr (idle)
493.1W, 1682.53BTU/hr (full load)
Operating temperature 0-40°C (operating)
-40 to +70°C (storage)
Humidity 5%-90%, non-condensing
Product Certifications
Certifications CE, UL, FCC, ISED, CCC,
VCCI, RCM, BIS (CRS)
Performance¹ XG 550 Rev. 2 XG 650 Rev. 2
Firewall throughput 65 Gbps 85 Gbps
Firewall IMIX 23 Gbps 28 Gbps
VPN throughput 8.4 Gbps 9 Gbps
IPS throughput 17 Gbps 20 Gbps
NGFW (IPS + App Ctrl +
WebFilter) max.
9 Gbps 10 Gbps
Antivirus throughput (proxy) 10 Gbps 13 Gbps
Concurrent connections 30,000,000
New connections/sec 220,000 240,000
Maximum licensed users unrestricted
Physical interfaces
Storage (local
quarantine/logs)
2 x integrated
hot-swap SSD (RAID)
Ethernet interfaces
(removable) 8 GE copper
No. of FleXi Port slots 4 6
FleXi Port modules (optional) 8 port GE copper
8 port GE SFP*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port SFP* plus 4 port GE
copper LAN bypass
I/O ports 2 x USB 2.0 (front)
1 x USB 3.0 (rear)
2 x Mgmt Port (eth0/eth1, front)
1 x COM (RJ45) (front)
1 x VGA (rear)
Display Multi-function LCD module
Power supply 2 x hot-swap internal auto-ranging
100-240VAC, 50-60 Hz PSU
Physical specifications
Mounting 2U sliding rails (included)
Dimensions
Width x Depth x Height
438 x 600 x 88 mm
17.24 x 23.62 x 3.46 inches
Weight 17.8 kg / 39.24 lbs (unpacked)
27 kg / 59.53 lbs (packed)
* Transceivers (mini GBICs) sold separately
Navigation
for LCD
2 x USB 2.0
4 expansion bays for Flexi Port
modules. 1 x 8 port GbE copper module
supplied as default (removable)
1 x COM (RJ45)
2 x hot-swap
SSD (RAID-1)
Multi-function LCD display
2 x management port
Navigation
for LCD
2 x USB 2.0
6 expansion bays for Flexi Port
modules. 1 x 8 port GbE copper module
supplied as default (removable)
1 x COM (RJ45)
2 x hot-swap
SSD (RAID-1)
Multi-function LCD display
2 x management port
4 x swappable fan
1 x USB 3.0 1 x VGA port Power switch
2 x hot swappable
power supply
Sophos XG Firewall
14
Sophos XG Series Rackmount Appliances:
XG 750
Technical Specifications
The Sophos XG 750 is a high performance firewall suitable for high traffic datacenter and large enterprise environments.
Intel multi core technology and redundancy features such as dual SSDs, power supplies and swappable fans, ensure you’re
protected at all times. With a total of 8 FleXi Port bays, one of which comes equipped with a default 8 port GbE copper
module, connectivity knows no bounds and can reach a maximum of 64 ports using the optional modules.
Front View
Back View
Environment
Power consumption 326.5W, 1114.01BTU/hr (idle)
512.2W, 1747.62BTU/hr (full load)
Operating temperature 0-40°C (operating)
-40 to +70°C (storage)
Humidity 5%-90%, non-condensing
Product Certifications
Certifications CE, UL, FCC, ISED, CCC,
VCCI, RCM, BIS (CRS)
Performance¹ XG 750 Rev. 2
Firewall throughput 100 Gbps
Firewall IMIX 33.5 Gbps
VPN throughput 11 Gbps
IPS throughput 22 Gbps
NGFW (IPS + App Ctrl +
WebFilter) max.
11.8 Gbps
Antivirus throughput (proxy) 17 Gbps
Concurrent connections 30,000,000
New connections/sec 300,000
Maximum licensed users unrestricted
Physical interfaces
Storage (local
quarantine/logs)
2 x integrated hot-swap SSD (RAID)
Ethernet interfaces
(removable)
8 GE copper
No. of FleXi Port slots 8
FleXi Port modules (optional) 8 port GE copper
8 port GE SFP*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port SFP* plus 4 port GE
copper LAN bypass
I/O ports 2 x USB 2.0 (front)
1 x USB 3.0 (rear)
2 x Mgmt Port (eth0/eth1, front)
1 x COM (RJ45) (front)
1 x VGA (rear)
Display Multi-function LCD module
Power supply 2 x hot-swap external auto ranging
100-240VAC, 50-60 Hz
Physical specifications
Mounting 2U sliding rails (included)
Dimensions
Width x Depth x Height
438 x 600 x 88 mm
17.24 x 23.62 x 3.46 inches
Weight 17.8 kg / 39.24 lbs (unpacked)
27 kg / 59.53 lbs (packed)
* Transceivers (mini GBICs) sold separately
4 x swappable fan
1 x USB 3.0 1 x VGA port Power switch
2 x hot swappable
power supply
Navigation
for LCD
2 x USB 2.0
8 expansion bays for Flexi Port
modules. 1 x 8 port GbE copper module
supplied as default (removable)
1 x COM (RJ45)
2 x hot-swap
SSD (RAID-1)
Multi-function LCD display
2 x management port
Sophos XG Firewall
15
FleXi Port Modules
Configure your hardware to suit your infrastructure and change it as and when you need to. Our optional FleXi Port LAN
modules give you the freedom to select the connectivity you need – copper, fiber, 10GbE – you decide.
In some cases, FleXi Port modules are interchangeable within a range of appliances, so, for example, you can use the same
module with all of your 1U appliances which saves you money if you upgrade to a higher model at a later date.
FleXi Port Modules for 1U FleXi Port Modules for 2U
8 port GbE copper FleXi Port module (for SG/XG 2xx/3xx/4xx only) 8 port GbE copper FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
8 port GbE SFP FleXi Port module (for SG/XG 2xx/3xx/4xx only) 8 port GbE SFP FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
2 port 10 GbE SFP+ FleXi Port module
(for SG/XG 2xx/3xx/4xx only)
2 port 10 GbE SFP+ FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
4 port 10 GbE SFP+ FleXi Port module
(for SG/XG 2xx/3xx/4xx only) 4 port 10 GbE SFP+ FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
2 port 40 GbE QSFP+
(for SG/XG 210 Rev.3 and SG/XG 230, 3xx and 4xx Rev.2 only) 4 port GbE SFP plus 4 port GbE copper LAN bypass FleXi port module
(for XG 750 and XG 550/650 Rev.2 only)
4 port 1GE copper PoE
(for SG/XG 210 Rev.3 and SG/XG 230, 3xx and 4xx Rev.2 only)
8 port 1GE copper PoE
(for SG/XG 210 Rev.3 and SG/XG 230, 3xx and 4xx Rev.2 only)
4 port GbE copper LAN Bypass FleXi Port module
(for XG 2xx/3xx/4xx only)
Please note: Transceivers (mini GBICs) are sold separately.
Sophos XG Firewall
16
Sophos Wireless
Protection
Get secure and reliable wireless access all
over the office
Simplify your wireless networking by using your Sophos
XG Firewall as a wireless controller to centralize your Wi-Fi
management and security. Sophos Wireless Protection
is included in the Base Firewall license and for example,
provides full hotspot support to simply set up guest and
visitor access. Our optional access points are automatically
set up and configured by the firewall. That means all your
wireless clients get complete threat protection too.
Choose your Access Point
Our APs are built on the latest enterprise-class, high-speed
wireless chipsets with custom designed antennas, added
CPU and memory resources, and hardware accelerated
encryption. Find out more.
Hardware Appliances with integrated WiFi
All our XG Series desktop appliances are available with an
integrated wireless access point. Coverage can be further
extended by adding Sophos Access Points. Please see the
Hardware section for further details.
Sophos RED
(Remote Ethernet Device)
Turn any location into a secure location
with our Remote Ethernet Devices (RED)
If you have branch offices, retail locations, remote outposts
or otherwise need to extend your secure network easily
and affordably beyond your main facility, Sophos Remote
Ethernet Devices are the ideal solution. Uniquely simple and
imminently affordable, RED provides an elegant solution to
building a secure distributed network.
Plug-and-protect
Sophos RED makes extending your secure network to
other locations easy. It requires no technical skills at the
remote site; simply enter the RED device ID into your XG
Firewall console and ship it. As soon as it’s plugged in and
connected to the Internet, it will contact your firewall and
establish a secure dedicated VPN tunnel. It’s that easy.
Sophos XG Firewall
17
Sophos Firewall Manager
(SFM)
Sophos Firewall Manager (SFM) provides powerful
centralized management for all your Sophos Firewalls
across multiple customers sites or branch offices all from a
single screen. Whether you’re an MSP, Enterprise Network
Security Admin, or simply managing a few small offices,
SFM simplifies security management enabling consistent
enforcement, easy provisioning of new policies, and at-a-
glance monitoring of device health. SFM saves you time,
money and makes management simpler.
Comprehensive Centralized Management
Manage all Firewall policies and configuration from
single console.
Insightful Monitoring
At-a-glance device and network health indicators.
Extensive Administrative controls
Role-based administration, change control and logging.
Flexible Deployment Options
Available as Hardware, Software, or Virtual appliance.
Sophos iView v2
Monitoring a distributed network across multiple locations
can be a challenge. That’s where Sophos iView can help. It
provides you with an intelligent, uninterrupted view of your
network from a single pane of glass. If you have multiple
appliances, need consolidated reporting, or could just use
help with log management or compliance, Sophos iView is
the ideal solution.
Consolidated reporting
Aggregated reporting across multiple Sophos and
Cyberoam firewall devices.
User-based Reporting
Our patented Layer-8 user identity provides visibility into user
activities regardless of where they’re working.
Security intelligence
Identify potential network issues and possible attacks
anywhere across your network.
Log backup and management
Logs data from multiple devices at distributed locations with
smart indexing and easy search facilities.
Deployment options
Available as software ISO or virtual appliance.
Sophos XG Firewall
Free Home Use version
Our Sophos XG Firewall Home Edition is a fully-equipped software version that
gives you complete network, web, mail, and web application security with VPN
functionality, for home-use only and limited to 4 virtual cores, 6 GB of RAM.
Visit sophos.com/freetools
Try it for free – business and even at home
If you have any additional questions visit sophos.com or give one of our Sales Agents a call.
Free 30-day trial – no strings attached
If you’d like to take it for a test drive you can get the full-featured
product simply sign-up for our free 30-day trial.
See it in action now
You can take a walkthrough of the user interface with our interactive demo or watch videos
showing you just how we make network security simple.
Visit sophos.com/xgfirewall
¹ General: Max. throughput measured under ideal test conditions using SF-OS 16.5 with App-classification disabled using industry standard Spirent /Avalanche performance test and
Ixia test tools. Actual performance may vary depending on network conditions and activated services.
ÌFW: UDP throughput based on RFC 2544 using 1518 Byte packet size.
ÌFW IMIX: UDP throughput based on a combination of 48 bytes, 576 bytes and 1518 bytes packet sizes.
ÌIPS/NGFW: HTTP throughput using default IPS ruleset and 512KB object size (NGFW: with AppCtrl enabled)
ÌVPN: HTTP throughput using multiple tunnels and 512KB HTTP response size
ÌAV: HTTP throughput using Web proxy and 200KB response size
United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com
North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com
Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au
Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com
© Copyright 2017. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK
Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are
trademarks or registered trademarks of their respective owners.
17-06-27 BRNA (2665-DD)
