Sophos XGS 88w XY88ZZ12ZZPCUS firewall appliance 4 GB LPDDR5 16 GB eMMC Wi-Fi 6 4 x 2.5G RJ-45

Desktop firewall with Wi-Fi 6

The Sophos XGS 88w is a desktop firewall appliance designed for small offices or branch locations that need wired and wireless protection in one unit. It integrates a 2x2 Wi-Fi 6 radio and four 2.5 GBase-T ports so traffic can be inspected without a separate access point. The fanless chassis suits noise-sensitive environments such as open-plan offices or retail counters. Buyers who require rackmount brackets, PoE ports or a second wireless radio should look elsewhere.

Bundled Xstream Protection licence

The included one-year Xstream Protection bundle activates Base, Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, DNS Protection, MDR and third-party threat feeds, NDR Essential Protection and Enhanced Support. These licences enable TLS 1.3 inspection, sandboxing for unknown files, FastPath application offload and SD-WAN orchestration across multiple WAN links. Without the bundle the appliance would only provide basic connectivity and no deep packet inspection or cloud-assisted threat intelligence.

Throughput headroom for encrypted traffic

Firewall throughput reaches 9,900 Mbps while IMIX traffic runs at 6,500 Mbps and IPsec VPN caps at 6,000 Mbps. Threat Protection, IPS and NGFW each sustain 2,000 Mbps, but TLS 1.3 inspection drops to 600 Mbps, making encrypted traffic the practical bottleneck. The 4 GB LPDDR5 memory and 16 GB eMMC storage support logging and signature updates for typical branch workloads. Environments that push sustained encrypted inspection above 600 Mbps will need a larger model.