We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Small white rectangular desktop box with nine RJ45 ports and one SFP slot

Sophos

Sophos XGS 118 XT118Z12ZZPCUS firewall appliance 8 GB LPDDR5 64 GB UFS 2.1

SKU CH-EADZ-KJVR7 MPN XT118Z12ZZPCUS

Desktop firewall appliance with nine 2.5 GbE ports, 8 GB LPDDR5 memory, 64 GB UFS 2.1 storage and 15.14 Gbps firewall throughput

  • Port count9 × 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5
  • Product dimensions320 × 212 × 44 mm

Model XGS 118

Model 1-Year Standard Protection

  • TLS 1.3 inspection reveals threats hidden inside encrypted traffic
  • 8 GB LPDDR5 memory plus 64 GB UFS 2.1 storage run the security engine
  • Nine 2.5GBase-T copper ports and one SFP fiber port connect high-speed links
  • Fanless desktop design operates silently in noise-sensitive environments
  • 228 927-hour MTBF indicates long-term hardware reliability

Sophos XGS 118 desktop firewall

The Sophos XGS 118 is a desktop firewall appliance built around an Intel x86 CPU with 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage. It provides nine 2.5GBase-T RJ-45 ports, one SFP fibre port, one COM RJ-45, one COM Micro-USB with cable, one front USB 2.0 and one rear USB 3.0. Firewall throughput reaches 15.14 Gbit/s and TLS 1.3 inspection runs at 1,100 Mbps.

Small offices needing quiet 2.5 GbE security

Fanless operation makes the unit suitable for noise-sensitive environments such as open-plan offices or reception areas. The bundled one-year Standard Protection licence covers Base, Network and Web Protection. Organisations that require Zero-Day Protection, Central Orchestration, DNS Protection or NDR Essential Protection must upgrade to the Xstream Protection bundle. Buyers who need PoE ports, expansion slots or an integrated Xstream Flow Processor should consider other models.

Included console cable and Standard licence

A Micro-USB console cable ships in the box for initial configuration. The Standard Protection licence activates network and web filtering immediately, while the hardware’s FastPath acceleration offloads trusted traffic to reduce CPU load. Deep packet inspection, intrusion prevention and advanced threat protection inspect encrypted sessions at line rate. Integration APIs allow coordination with other Sophos security products for shared threat intelligence.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,133.99
Pricier than about 61% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 118
Part numberXT118Z12ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count9 × 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
3.9 kg / 8.6 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

Does the Sophos XGS 118 need an external modem or upstream router to connect to my ISP?

Yes. The appliance has nine 2.5GBase-T RJ-45 ports and one SFP fiber port but no built-in DSL, cable or cellular modem, so an upstream device is required for the WAN link.

Can I keep my existing Gigabit switches and Wi-Fi access points behind this firewall?

Yes. The 2.5GBase-T ports auto-negotiate down to 1 Gbps and 100 Mbps, so current Gigabit switches and APs will work without replacement.

How can I verify the XGS 118 is inspecting TLS 1.3 traffic at the rated 1,100 Mbps after deployment?

Enable TLS inspection in a firewall rule, then watch the live dashboard or run a throughput test against the TLS inspection throughput figure of 1,100 Mbps shown in the performance specifications.

More in Firewall Appliances & VPN Gateways

Similar items