We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact silver desktop firewall appliance with nine RJ-45 ports on the front

Sophos

Sophos XGS 128 XX128Z36ZZPCUS firewall appliance 8 GB LPDDR5 64 GB UFS 2.1 9 port 2.5GBase-T

SKU CH-C1E4-CH3S8 MPN XX128Z36ZZPCUS

Desktop firewall appliance with nine 2.5 Gigabit Ethernet ports, 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage, delivering 19,100 Mbps firewall throughput and TLS 1.3 inspection

  • Port count9 × 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5
  • Product dimensions320 × 212 × 44 mm

Model XGS 128

Model 3-Year Xstream Protection

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • 5 GbE copper ports deliver high-speed wired connectivity

Desktop firewall appliance for small networks

The Sophos XGS 128 is a desktop-form-factor security appliance designed for small offices or branch locations that need encrypted-traffic visibility without rack mounting. It ships new with 8 GB of LPDDR5 memory and 64 GB of UFS 2.1 storage, and it operates silently because the chassis is fanless. The included three-year Xstream Protection bundle activates the full inspection suite on day one.

2.5GBase-T copper ports set the connectivity

Nine RJ-45 interfaces run at 2.5 Gigabit Ethernet, providing the primary LAN and WAN links for the appliance. A single SFP cage is also present for fibre uplinks, but the copper port count and speed are the fixed parameters that determine whether the unit fits a given network layout. No expansion slots exist to add more interfaces later.

Bundled licence stack enables inspection

The three-year Xstream Protection licence unlocks TLS 1.3 decryption at 1,450 Mbps, threat protection at 4,000 Mbps, IPS at 4,650 Mbps and NGFW throughput at 4,350 Mbps. It also activates SD-WAN orchestration, DNS protection, zero-day sandboxing and NDR essentials, turning the hardware into a managed security node without extra subscriptions.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $2,675.99
Pricier than about 80% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 128
Part numberXX128Z36ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count9 × 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
3.9 kg / 8.6 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

What does the 18.65 Gbit/s firewall throughput mean when the appliance is in production?

It represents the maximum firewall inspection rate under ideal test conditions; real-world throughput will be lower once traffic mixes, logging, and security policies are applied.

How does the 2.5GBase-T interface limit actual network speed?

Each copper port caps at 2.5 Gbps full-duplex, so any link negotiated at 1 Gbps or 100 Mbps will run at that lower rate instead.

What physical space and mounting does the desktop chassis require?

The unit measures 320 x 212 x 44 mm and weighs 2.4 kg, designed for flat desktop placement with no rack ears included.

More in Firewall Appliances & VPN Gateways

Similar items