We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in

Sophos

Sophos XGS 128 XG128Z00ZZPCUS firewall appliance 9x2.5G 8GB LPDDR5 64GB

SKU CH-R2S7-WJA74 MPN XG128Z00ZZPCUS

Desktop firewall appliance with nine 2.5 GbE copper ports, 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage

  • Port count9 × 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5
  • Product dimensions320 × 212 × 44 mm
  • Desktop form factor fits tight spaces
  • 9 × 2.5 GbE copper ports deliver high-speed wired connectivity
  • 8 GB LPDDR5 memory supports concurrent inspection tasks
  • 64 GB UFS 2.1 storage holds logs and signatures
  • 1,450 Mbps TLS 1.3 inspection throughput reveals encrypted threats

Sophos XGS 128 firewall appliance

The Sophos XGS 128 is a desktop firewall and network security appliance built for small offices or branch locations. It delivers 18.65 Gbit/s firewall throughput and includes TLS 1.3 inspection, zero-day threat protection and SD-WAN orchestration. An Intel x86 CPU, 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage power the platform. The fanless chassis measures 320 x 212 x 44 mm and weighs 2.4 kg unpacked.

Verify port and mounting requirements

Confirm that nine 2.5GBase-T RJ-45 ports and one SFP fiber port match your LAN and WAN cabling plan. Check that the single USB 2.0 front port, USB 3.0 rear port, COM RJ-45 and COM Micro-USB console connections suit your management workflow. Ensure the 320 x 212 x 44 mm fanless desktop form factor fits your rack or shelf space and that the 2.4 kg weight is supported. No expansion slots are present, so future interface additions are not possible.

Licensed security services included

The bundled Xstream Protection bundle activates Base License, Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, DNS Protection, MDR and third-party threat feeds, NDR Essential Protection and Enhanced Support. These licences enable deep packet inspection, intrusion prevention, advanced threat protection and FastPath application acceleration without separate purchases. A Standard Protection bundle covering Base License and Network Protection is also available as an alternative tier.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,010.99
Pricier than about 57% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 128
Part numberXG128Z00ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count9 × 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
3.9 kg / 8.6 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

What comes in the box with the XGS 128 and which cables or modules must be purchased separately?

The appliance ships with a COM Micro-USB cable. SFP transceivers for the fiber port, rack-mount brackets and any additional USB peripherals are not included and must be sourced separately.

Which model variant or capacity should I choose for a small office needing 2.5 GbE connectivity?

The XGS 128 provides nine 2.5GBase-T copper ports, one SFP fiber port, 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage in a fanless desktop form factor — no other capacity or port-count options exist for this SKU.

What does the 18.65 Gbit/s firewall throughput figure mean when the unit is inspecting encrypted traffic?

TLS 1.3 inspection throughput is rated at 1,450 Mbps, so encrypted traffic inspection runs far below the raw 18.65 Gbit/s firewall number; plan capacity around the 1,450 Mbps TLS figure for real-world HTTPS workloads.

More in Firewall Appliances & VPN Gateways

Similar items