Sophos XGS138 – Dual-Processor Desktop Firewall with XStream Protection
Sophos XGS138 is the ultimate desktop firewall appliance for enterprise edge networks. Featuring dual-processor architecture, built-in 10 GE SFP+ fiber ports, PoE support, and XStream Protection, it delivers high-speed firewall, VPN, and threat protection while supporting expansion modules for future upgrades.
Description
Sophos XGS138 is a powerful desktop firewall appliance designed for modern enterprise edge networks that demand both speed and security. Built with dual processors and a dedicated Xstream Flow Processor, the Sophos XGS138 delivers outstanding firewall throughput, advanced VPN capabilities, and deep packet inspection for encrypted traffic.
The Sophos XGS138 supports up to 19,100 Mbps firewall throughput, 6,600 Mbps IPsec VPN, and 4,750 Mbps threat protection performance. Its XStream SSL/TLS inspection engine can handle up to 1,700 Mbps of encrypted traffic, providing superior security for sensitive network data.
Connectivity on the Sophos XGS138 includes 4 GE copper ports, 2 × 2.5 GE PoE ports (30W max per port), and 2 × 10 GE SFP+ fiber ports. For scalability, it offers an expansion bay compatible with optional 5G modules, allowing your network to grow as your organization evolves.
The Sophos XGS138 comes with 64 GB M.2 storage for fast logging, reporting, and system data. It supports multiple licensing options: 1-Year and 3-Year Standard Protection for application control and web security, or 1-Year and 3-Year XStream Protection to maximize dual-processor performance with deep packet inspection and cloud sandboxing.
Designed for demanding edge networks, the Sophos XGS138 provides enterprise-grade security, reliable performance, and modular flexibility. Its compact desktop form factor allows deployment in offices, branch locations, or edge network points without requiring a rack.
With XStream Protection, the Sophos XGS138 ensures synchronized security, real-time threat intelligence, and centralized management, making it the ideal choice for organizations looking to combine high-speed networking with advanced cybersecurity capabilities.
Performance:
-
Firewall: 19,100 Mbps
-
IPsec VPN: 6,600 Mbps
-
Threat Protection: 4,750 Mbps
-
XStream SSL/TLS: 1,700 Mbps
Ports & Connectivity:
-
4 × GE Copper
-
2 × 2.5 GE PoE (30W max per port)
-
2 × 10 GE SFP+ Fiber
-
1 × Expansion Bay (optional 5G Module)
Hardware:
-
Dual-Processor Architecture with Xstream Flow Processor
-
Storage: 64 GB M.2
Licensing Options:
-
1-Year Standard Protection: application control, web security, reporting
-
3-Year Standard Protection
-
1-Year XStream Protection: deep packet inspection, cloud sandboxing
-
3-Year XStream Protection
Performance:
-
Firewall: 19,100 Mbps
-
IPsec VPN: 6,600 Mbps
-
Threat Protection: 4,750 Mbps
-
XStream SSL/TLS: 1,700 Mbps
Ports & Connectivity:
-
4 × GE Copper
-
2 × 2.5 GE PoE (30W max per port)
-
2 × 10 GE SFP+ Fiber
-
1 × Expansion Bay (optional 5G Module)
Hardware:
-
Dual-Processor Architecture with Xstream Flow Processor
-
Storage: 64 GB M.2
Licensing Options:
-
1-Year Standard Protection: application control, web security, reporting
-
3-Year Standard Protection
-
1-Year XStream Protection: deep packet inspection, cloud sandboxing
-
3-Year XStream Protection
Technical Datasheet
You can download the full technical documentation for this product from the link below:
Download PDF Datasheet













