We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact grey desktop firewall appliance with front RJ-45 ports and USB 2.0

Sophos

Sophos XGS 138 XT138Z36ZZPCUS firewall appliance 8 GB DDR4 64 GB M.2

SKU CH-VHMH-4N4ST MPN XT138Z36ZZPCUS

A desktop firewall appliance with 8 GB DDR4 memory, 64 GB M.2 storage, four GE copper ports, two 2.5 GE copper ports, two SFP+ fiber ports, and 18.65 Gbit/s firewall throughput

  • Port count4 x GE copper 2 × 2.5GE copper 2 x SFP+ fiber 1 x COM RJ45 1
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: AMD x86 CPU Memory: 8 GB DDR4 Xstr
  • Product dimensions320 × 212 × 44 mm

Model XGS 138

Model 3-Year Standard Protection

  • TLS 1.3 inspection reveals threats hidden inside encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • 19,100 Mbps firewall throughput handles heavy network loads

Purpose-built desktop firewall

The Sophos XGS 138 is a desktop security appliance for small offices and branch sites that need encrypted traffic inspection and threat protection without a rack. It combines an AMD x86 CPU with 8 GB DDR4 system memory and a Marvell NPU with 4 GB DDR4 to accelerate TLS 1.3 inspection, IPS and sandboxing. Local logging and reporting are stored on a 64 GB M.2 drive and the bundle includes three years of Standard Protection licensing.

Fanless thermal design

With no moving parts the unit runs silently, making it suitable for open-plan offices or reception areas where noise must stay low. The chassis measures 320 x 212 x 44 mm and weighs 2.4 kg unpacked, so it sits on a shelf or desk without special mounting. Power consumption is approximately half that of the previous desktop generation, reducing both operating cost and heat output in confined spaces.

Copper and fibre connectivity

Six Ethernet ports provide flexible WAN and LAN options: four 1 GbE RJ-45, two 2.5 GbE RJ-45 and two 10 GbE SFP+ cages for fibre uplinks. A front USB 2.0 port, a rear USB 3.0 port, a COM RJ-45 console and a micro-USB console cable give multiple management paths. No expansion slots are present, so the port count is fixed for the life of the appliance.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $3,653.99
Pricier than about 84% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 138
Part numberXT138Z36ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count4 x GE copper
2 × 2.5GE copper
2 x SFP+ fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
4.4 kg / 9.7 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

How do I install the Sophos XGS 138 in a rack when the unit ships as a desktop form factor?

The appliance is a desktop model measuring 320 x 212 x 44 mm and weighing 2.4 kg; no rack-mount brackets are included, so it sits on a shelf or flat surface. If you later need rack mounting, purchase a compatible third-party shelf that supports the depth and weight.

Which component will need replacement first under continuous operation?

The built-in 64 GB M.2 storage is not user-replaceable and has no RAID redundancy; plan for appliance replacement when the drive reaches end of life. The fanless design eliminates fan wear, and the MTBF is rated at 200,091 hours.

At what sustained throughput does TLS 1.3 inspection become the bottleneck?

TLS 1.3 inspection throughput is rated at 1,700 Mbps, which is lower than the 4,750 Mbps threat protection or 5,850 Mbps IPS rates, so encrypted traffic inspection will hit its limit first during sustained encrypted workloads.

More in Firewall Appliances & VPN Gateways

Similar items