We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact silver desktop firewall appliance with front ports and ventilation slots

Sophos

Sophos XGS 138 XT138Z12ZZPCUS firewall appliance 8 GB DDR4 64 GB

SKU CH-CVA8-JDBSF MPN XT138Z12ZZPCUS

Desktop firewall appliance with 8 GB DDR4 memory, 64 GB storage, four 2.5 GbE copper ports, two SFP+ fiber ports and 18.65 Gbit/s firewall throughput

  • Port count4 x GE copper 2 × 2.5GE copper 2 x SFP+ fiber 1 x COM RJ45 1
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: AMD x86 CPU Memory: 8 GB DDR4 Xstr
  • Product dimensions320 × 212 × 44 mm

Model XGS 138

Model 1-Year Standard Protection

  • TLS 1.3 inspection reveals hidden threats in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • 19,100 Mbps firewall throughput handles heavy network loads
  • Fanless desktop design runs silently in noise-sensitive spaces

XGS 138 desktop firewall appliance

The Sophos XGS 138 is a desktop network security appliance built for small to mid-sized businesses that need encrypted traffic inspection and threat protection without rack infrastructure. It ships with 8 GB DDR4 system memory, a 64 GB M.2 SSD and an AMD x86 CPU paired with a Marvell Xstream Flow Processor for hardware-accelerated scanning.

2.5G copper and 10G fiber port limits

Six wired interfaces provide 4 x 1 GbE RJ-45, 2 x 2.5 GbE RJ-45 and 2 x SFP+ slots for 10 GbE fiber uplinks. Firewall throughput reaches 19,100 Mbps while TLS 1.3 inspection sustains 1,700 Mbps, so encrypted traffic analysis becomes the practical bottleneck before the physical ports saturate.

Fanless desktop installation notes

The fanless 320 x 212 x 44 mm chassis weighs 2.4 kg and operates silently on a desktop or shelf. No expansion slots exist, so storage and memory are fixed at 64 GB and 8 GB DDR4 respectively. A front USB 2.0 and rear USB 3.0 port aid initial setup, while the included micro-USB console cable covers serial access.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,959.99
Pricier than about 74% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 138
Part numberXT138Z12ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count4 x GE copper
2 × 2.5GE copper
2 x SFP+ fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
4.4 kg / 9.7 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

Which port combination on the XGS 138 suits a small office needing both copper and fibre uplinks?

The appliance provides four 1 GbE copper ports, two 2.5 GbE copper ports and two SFP+ fibre ports, so copper workstations and fibre uplinks connect without extra modules.

What does the 1,700 Mbps TLS inspection figure mean for daily HTTPS traffic?

It is the maximum sustained throughput when decrypting and inspecting TLS 1.3 traffic; real-world HTTPS loads above that rate will bypass inspection or queue.

How do the SFP+ ports and 2.5 GbE copper ports limit WAN speed in practice?

SFP+ ports accept 10 GbE transceivers while the 2.5 GbE copper ports cap at 2.5 Gbps, so the fastest WAN link is determined by which port type the ISP handoff uses.

More in Firewall Appliances & VPN Gateways

Similar items