We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact grey desktop firewall appliance with nine RJ-45 ports and front USB socket

Sophos

Sophos XX128Z12ZZPCUS XGS 128 firewall appliance 8 GB LPDDR5 64 GB UFS 2.1 9 port 2.5GBase-T

SKU CH-Q77Y-X1TRM MPN XX128Z12ZZPCUS

Desktop firewall appliance with nine 2.5 GbE copper ports, 8 GB LPDDR5 memory, 64 GB UFS 2.1 storage and 18.65 Gbit/s firewall throughput

  • Port count9 × 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Appliance typeFirewalls / Security Appliances
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired
  • Key featuresForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5
  • Product dimensions320 × 212 × 44 mm

Model XGS 128

Model 1-Year Xstream Protection

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • 65 Gbit/s firewall throughput handles high-volume network demand
  • 9 × 2.5GBase-T copper ports connect devices at multi-gigabit speed
  • Fanless desktop form factor runs silently in noise-sensitive areas
  • 8 GB LPDDR5 memory with 64 GB UFS 2.1 storage powers the security engine

XGS 128 desktop firewall for small offices

The Sophos XGS 128 is a desktop network security appliance built around an Intel x86 processor with 8 GB of LPDDR5 memory and 64 GB of UFS 2.1 storage. Nine 2.5GBase-T copper ports and one SFP fiber port provide high-speed wired connectivity for small to mid-sized businesses that need consolidated threat protection without rack mounting.

Replaces older 1 GbE appliances when 2.5G

The jump is worth it when your internet link or LAN segments exceed 1 Gbps and you want to inspect encrypted traffic at line rate. TLS 1.3 inspection runs at 1 450 Mbps, while IPS and threat protection deliver 4 650 Mbps and 4 000 Mbps respectively. If your current gateway cannot sustain those speeds under full inspection, this model removes the bottleneck.

Limited by fixed port count

The appliance offers exactly nine copper ports and one SFP slot with no expansion slots, so additional interfaces require a separate switch. Throughput figures such as 19 100 Mbps firewall and 15 050 Mbps IPsec VPN are single-device maximums; multi-site SD-WAN orchestration depends on the Sophos Central cloud platform rather than local clustering.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,549.99
Pricier than about 69% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 128
Part numberXX128Z12ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired
Connectivity
Wireless typeNone
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count9 × 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
3.9 kg / 8.6 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

What are the exact dimensions of the XGS 128 desktop chassis for rack or shelf planning?

The unit measures 320 mm wide, 212 mm deep and 44 mm high, weighing 2.4 kg unpacked, so it fits a standard 1U desktop footprint without rails.

Which cable is required for the initial console session on the COM Micro-USB port?

A Micro-USB cable is included in the box; connect it to the front COM Micro-USB port and a management PC to reach the CLI for first-time setup.

Does the 64 GB UFS 2.1 storage module require any scheduled replacement or health monitoring?

The soldered UFS 2.1 storage has no user-replaceable parts and no published wear-out interval; the 228,927-hour MTBF covers the entire appliance.

More in Firewall Appliances & VPN Gateways

Similar items