We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Rectangular desktop firewall appliance, matte black finish, front USB port visible

Sophos

Sophos XGS 138 XG138Z00ZZPCUS firewall appliance 8 GB DDR4 64 GB

SKU CH-FNXM-MWVMY MPN XG138Z00ZZPCUS

Desktop network security appliance with 8 GB DDR4 memory, 64 GB storage, six copper and fiber ports, and 18.65 Gbit/s firewall throughput

  • Port count4 x GE copper 2 × 2.5GE copper 2 x SFP+ fiber 1 x COM RJ45 1
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: AMD x86 CPU Memory: 8 GB DDR4 Xstr
  • Product dimensions320 × 212 × 44 mm

Model XGS 138

Model Hardware Only

  • Firewall throughput reaches 19100 Mbps for high-speed network protection
  • TLS inspection runs at 1700 Mbps to secure encrypted traffic
  • Zero-day protection uses machine learning and sandboxing against unknown threats
  • Desktop form factor fits space-constrained deployments
  • 8 GB DDR4 memory and 64 GB storage support security processing

Sophos XGS 138 Desktop Firewall

The Sophos XGS 138 is a new desktop firewall appliance built around an AMD x86 CPU with 8 GB of DDR4 system memory and a 4 GB DDR4 Marvell NPU for flow processing. It provides wired connectivity through four RJ-45 GE copper ports, two 2.5GBase-T copper ports and two SFP+ fiber ports, plus a front USB 2.0 port, a rear USB 3.0 port and console access via RJ-45 and micro-USB. The unit stores its operating system and logs on a 64 GB M.2 SSD and operates without a fan.

Suited to small offices needing encrypted traffic

This appliance suits small offices that need TLS 1.3 inspection, deep packet inspection, intrusion prevention and zero-day threat protection powered by machine learning and sandboxing. It also supports SD-WAN orchestration for managing multiple WAN links and branch overlays. Buyers who require internal expansion slots, RAID storage redundancy, wireless connectivity or higher throughput for larger networks should evaluate other models.

18.65 Gbit/s TLS firewall throughput decides fit

The single specification that determines whether this is the right part is the 18.65 Gbit/s firewall throughput measured with TLS inspection enabled. This figure represents the maximum encrypted traffic inspection capacity and directly limits the size of the network the appliance can protect without becoming a bottleneck.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,100.99
Pricier than about 60% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 138
Part numberXG138Z00ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count4 x GE copper
2 × 2.5GE copper
2 x SFP+ fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
4.4 kg / 9.7 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

How much power does the XGS 138 draw when running continuously?

The appliance is described as having 50% lower power consumption with its redesigned architecture, and it operates without a fan, making it suitable for noise-sensitive environments where it runs all day.

What cabling and modules are needed to use the 2.5GBase-T and 10GBase-X ports?

The 2.5GBase-T ports use standard RJ-45 copper cabling, while the two SFP+ fiber ports require compatible SFP+ transceivers and fiber patch cables, which are not included with the appliance.

Can the XGS 138 connect to an existing 1 GbE switch stack without a speed mismatch?

Yes, the four GE copper ports and two 2.5GE copper ports auto-negotiate down to 1 GbE, so they link directly to older 1000Base-T switches using standard Cat5e or Cat6 patch cords.

More in Firewall Appliances & VPN Gateways

Similar items