We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Silver 1U rackmount security appliance, eight copper ports, four fiber ports, front USB ports

Sophos

Sophos IG3A3CSUS XGS 3100 firewall appliance

SKU CH-TB1M-7PCPT MPN IG3A3CSUS

A 1U rackmount firewall appliance with eight copper gigabit ports, two SFP+ 10 GbE fiber ports, 12 GB DDR4 memory, 240 GB SATA SSD and three-year Xstream Protection subscription

  • Port count8 x GE copper 2 x SFP GE Fiber 2 x SFP+ 10 GE Fiber 1 x RJ45
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed10/100/1000Base-T 10GBase-X
  • Product typeWired
  • Key featuresForm Factor: 1U Short CPU: AMD x86 CPU Memory: 12 GB (2666)
  • Product dimensions438 × 405 × 44 mm

Model XGS 3100

Model 3-Year Xstream Protection

  • Enterprise-grade firewall throughput up to 47 Gbps for high-speed network protection
  • TLS 1.3 inspection at 2.47 Gbps secures encrypted traffic visibility
  • Dual-processor architecture with Xstream Flow Processor offloads trusted traffic for performance
  • 1U short-depth rackmount with 8 copper and 4 fiber ports fits dense deployments
  • Includes 3-year Xstream Protection subscription for zero-day threat defence

Product Identity

The Sophos XGS 3100 is a 1U rackmount network security appliance designed for mid-sized and distributed organizations. It combines a dual-processor architecture with an AMD x86 CPU and a Marvell NPU to deliver high-throughput firewall and inspection capabilities. The unit ships with a three-year Xstream Protection subscription and includes a rackmount kit.

Fit and Limits

This appliance suits teams that need integrated SD-WAN orchestration, TLS 1.3 inspection, and zero-day threat protection in a single chassis. Buyers who require built-in RAID storage redundancy, internal expansion cards, or wireless connectivity should look at other form factors because this model offers none of those features.

Deciding Specification

The appliance provides eight Gigabit copper ports, two SFP Gigabit fiber ports, and two SFP+ 10 Gigabit fiber ports for flexible WAN and LAN connectivity. All network interfaces are fixed on the base unit, so the port count and speed mix is the single specification that determines whether this model matches the deployment topology.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $15,202.99
Pricier than about 91% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 3100–3Yr Xstream Protection
Part numberIG3A3CSUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed10/100/1000Base-T
10GBase-X
Ports & slots
Port count8 x GE copper
2 x SFP GE Fiber
2 x SFP+ 10 GE Fiber
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
Size & build
Product dimensions438 × 405 × 44 mm
Product weight4.7 kg / 10.36 lb (unpacked)
7 kg / 15.43 lb (packed)
Shipping weight6.40 kg
Package size549 × 470 × 150 mm

Other versions of this model

5 more in the same range

Questions about this item

Should I choose the 12 GB DDR4 system memory or the 4 GB DDR4 NPU memory for my workload?

The 12 GB DDR4 at 2666 MHz serves the main AMD x86 CPU for general firewall tasks, while the separate 4 GB DDR4 is dedicated to the Marvell NPU for flow processing; both are fixed and not user-selectable.

What does the 2.47 Gbps TLS inspection figure mean when the appliance is handling live encrypted traffic?

It represents the maximum sustained throughput for decrypting, inspecting, and re-encrypting TLS 1.3 sessions under test conditions; real-world throughput will be lower depending on cipher mix, session size, and concurrent connection count.

How do the 10GBase-X SFP+ ports and 10/100/1000Base-T copper ports cap throughput in practice?

The two SFP+ ports each support up to 10 Gbps fiber links, while the eight RJ-45 copper ports auto-negotiate at 10, 100, or 1000 Mbps; aggregate throughput is limited by the 47 Gbps firewall rating and 10.5 Gbps IPS rating.

More in Firewall Appliances & VPN Gateways

Similar items