We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in

Sophos

Sophos XGS 138 firewall appliance XX138Z36ZZPCUS 8 GB DDR4 64 GB

SKU CH-JSH3-DX2EQ MPN XX138Z36ZZPCUS

Desktop firewall appliance with 8 GB DDR4, 64 GB storage and 18.65 Gbit/s throughput

  • Port count4 x GE copper 2 × 2.5GE copper 2 x SFP+ fiber 1 x COM RJ45 1
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: AMD x86 CPU Memory: 8 GB DDR4 Xstr
  • Product dimensions320 × 212 × 44 mm
  • Firewall throughput reaches 19,100 Mbps for high-speed traffic handling
  • TLS inspection processes 1,700 Mbps of encrypted sessions
  • Zero-day protection uses machine learning and sandboxing
  • Desktop form factor measures 320 x 212 x 44 mm fanless
  • Eight ports include 2.5G copper, SFP+ fiber and USB 3.0

Purpose-built desktop security appliance

The Sophos XGS 138 is a desktop firewall appliance designed for small offices and branch locations that need encrypted-traffic visibility without rack mounting. It ships with a three-year Xstream Protection licence bundle covering network, web, zero-day, DNS and NDR essential protection. An AMD x86 CPU and a dedicated Marvell NPU offload inspection tasks from the main cores. The fanless chassis suits noise-sensitive environments such as reception areas or open-plan workspaces.

64 GB M.2 storage and 8 GB DDR4 system memory

The 64 GB M.2 drive holds firmware, logs and threat-intelligence caches while the 8 GB DDR4 system memory runs the management plane and security engines. Firewall throughput reaches 19,100 Mbps and IMIX throughput 10,500 Mbps, but TLS 1.3 inspection tops out at 1,700 Mbps, so heavy encrypted-traffic loads will become the bottleneck before raw packet forwarding does. IPS throughput is 5,850 Mbps and NGFW throughput 5,100 Mbps, giving headroom for typical branch traffic mixes. IPsec VPN capacity sits at 6,600 Mbps for site-to-site tunnels.

Fanless desktop chassis with 2.5G and 10G uplinks

The 320 x 212 x 44 mm fanless enclosure weighs 2.4 kg and operates silently on a desktop or shelf. Connectivity includes four 1 GbE RJ-45 ports, two 2.5 GbE RJ-45 ports and two 10 GbE SFP+ cages for fibre uplinks. A front USB 2.0 port, rear USB 3.0 port, RJ-45 console and micro-USB console cable are provided for local management. No expansion slots or RAID support are present, so storage and interface count are fixed at purchase.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $3,969.99
Pricier than about 85% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 138
Part numberXX138Z36ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count4 x GE copper
2 × 2.5GE copper
2 x SFP+ fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
4.4 kg / 9.7 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

Will the 2.5GBase-T ports negotiate down to 1 Gbps for my existing switches?

Yes, the two 2.5 Gigabit Ethernet copper ports auto-negotiate to 1000Base-T so current 1 Gbps switches connect at line rate.

Which front-panel indicator confirms the Xstream Flow Processor is processing traffic?

The NPU activity LED lights solid green when the Marvell NPU is actively offloading flows.

Does the box include a console cable for the RJ-45 COM port?

A USB 2.0 to Micro-USB console cable is included; an RJ-45 to DB-9 serial cable must be purchased separately.

More in Firewall Appliances & VPN Gateways

Similar items