We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in

Sophos

Sophos XGS 128 XT128Z12ZZPCUS firewall appliance 8 GB LPDDR5 64 GB

SKU CH-T6D5-TPBX9 MPN XT128Z12ZZPCUS

Desktop firewall appliance with 9 × 2.5 GbE copper ports, 1 SFP port, 8 GB LPDDR5 memory, 64 GB UFS storage and 19,100 Mbps firewall throughput

  • Port count9 × 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5
  • Product dimensions320 × 212 × 44 mm
  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware with machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost performance
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • Fanless desktop design runs silently in noise-sensitive spaces

Desktop firewall for small networks

The Sophos XGS 128 is a fanless desktop appliance with nine 2.5 GbE copper ports, one SFP fibre port and a 64 GB UFS 2.1 store. It ships new with a 1 year Standard Protection licence bundle. An Intel x86 CPU and 8 GB LPDDR5 memory drive the forwarding plane.

Silent operation and low power

With no moving parts the unit runs silently, suited to noise-sensitive offices. The redesigned architecture cuts power draw by roughly 50 % compared with earlier desktop models. Mean time between failures is rated at 228 927 hours. Dimensions are 320 x 212 x 44 mm and unpacked weight is 2.4 kg.

Licence bundle and management extras

Standard Protection includes base firewall, network protection and web protection plus central orchestration for multi-site SD-WAN oversight. TLS 1.3 inspection decrypts encrypted streams at 1 450 Mbps while deep packet inspection and IPS run at 4 650 Mbps. Zero-day sandboxing and DNS protection extend coverage without extra hardware.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,304.99
Pricier than about 64% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 128
Part numberXT128Z12ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count9 × 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
3.9 kg / 8.6 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

How do I rack-mount the 320 x 212 x 44 mm desktop chassis and which step is often missed?

Use the optional rack-mount brackets; the step often missed is removing the rubber feet before attaching the brackets so the unit sits flush.

Which component will need replacement first and what is its rated lifetime?

The internal SSD is the only field-replaceable part; its MTBF is 228,927 hours.

At what sustained throughput does TLS 1.3 inspection become the bottleneck?

TLS inspection peaks at 1,450 Mbps, so encrypted traffic above that rate will queue first.

More in Firewall Appliances & VPN Gateways

Similar items