We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in

Sophos

Sophos XGS 88 XT88ZZ12ZZPCUS firewall appliance 4 GB LPDDR5 16 GB eMMC 4 x 2.5 GBase-T

SKU CH-JHSR-CBGE8 MPN XT88ZZ12ZZPCUS

Desktop firewall appliance with four 2.5 GBase-T ports, 4 GB LPDDR5 memory, 16 GB eMMC storage, and 9.67 Gbit/s firewall throughput

  • Port count4 × 2.5 GBase-T - RJ-45 1 x management - RJ-45 1 x managemen
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet Ethernet, Fast Ethernet Gigabit Etherne
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: Intel x86 CPU Memory: 4 GB LPDDR5
  • Product dimensions200 × 180 × 44 mm
  • Desktop firewall with 2.5 GbE ports for fast wired connectivity
  • 4 GB LPDDR5 memory and 16 GB eMMC storage for responsive operation
  • 67 Gbit/s firewall throughput handles heavy traffic loads
  • TLS 1.3 inspection at 600 Mbps reveals threats in encrypted streams
  • Fanless design runs silently in noise-sensitive environments

Sophos XGS 88 Desktop Firewall

The Sophos XGS 88 is a desktop firewall appliance built for small offices and branch sites that need wired 2.5 Gigabit Ethernet connectivity. It runs on an Intel x86 CPU with 4 GB of LPDDR5 memory and 16 GB of eMMC storage. The unit includes a one-year Standard Protection licence bundle covering base firewall, network protection, web protection and central orchestration.

Fanless Build with Four 2.5G Ports

A fanless chassis measuring 200 x 180 x 44 mm and weighing 1.4 kg suits noise-sensitive environments such as reception desks or open-plan workspaces. Four RJ-45 ports each deliver 2.5 GBase-T speeds alongside a dedicated management port, a micro-USB console port, one USB 3.0 Type-A and one USB 2.0 Type-A. No expansion slots or internal drive bays are present, so the configuration is fixed at deployment.

Low Power Draw and Silent Operation

With no moving parts the appliance runs silently and the redesigned architecture targets 50% lower power consumption than earlier desktop models. MTBF is rated at 936,308 hours, indicating high reliability for continuous operation. Firewall throughput reaches 9,900 Mbps while TLS 1.3 inspection runs at 600 Mbps and threat protection, IPS and NGFW each sustain 2,000 Mbps.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $637.99
Cheaper than about 60% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 88
Part numberXT88ZZ12ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ethernet, Fast Ethernet
Gigabit Ethernet
Ports & slots
Port count4 × 2.5 GBase-T - RJ-45
1 x management - RJ-45
1 x management (micro-USB) - Type B
1 x USB 3.0 - Type A
1 x USB 2.0 - Type A
Size & build
Product dimensions200 × 180 × 44 mm
Product weight1.4 kg / 3.08 lb (unpacked)
2 kg /4.41 lb (packed)
Shipping weight2.77 kg
Package size277 × 249 × 117 mm

Other versions of this model

5 more in the same range

Questions about this item

What throughput does the 2.5 GBase-T interface cap at for TLS 1.3 inspection?

The four 2.5 GBase-T ports provide up to 600 Mbps of TLS 1.3 inspection throughput.

What rack space and clearance does the 200 x 180 x 44 mm desktop chassis require?

The fanless desktop unit measures 200 mm wide, 180 mm deep and 44 mm high, weighing 1.4 kg, so it fits on a shelf or desk without rack rails.

How is the initial licence activated, and which step is often missed?

Register the appliance in Sophos Central, then apply the included 12‑month Standard Protection licence; skipping the Central registration leaves the device unlicensed.

More in Firewall Appliances & VPN Gateways

Similar items