We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
White rectangular desktop firewall appliance with front USB port and rear port array

Sophos

Sophos XY128Z12ZZPCUS XGS 128w firewall appliance 8 GB LPDDR5 64 GB Wi-Fi 6

SKU CH-V4SD-M7B1Y MPN XY128Z12ZZPCUS

Desktop firewall and wireless access point with nine 2.5 GbE copper ports, Wi-Fi 6, 8 GB LPDDR5 memory and 64 GB storage

  • Port count9 × 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Appliance typeFirewalls / Security Appliances
  • Wireless typeWi-Fi 6/802.11ax
  • Ethernet speed2.5 Gigabit Ethernet
  • Product typeWired + Wireless
  • Key featuresForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5

Model XGS 128W

Model 1-Year Xstream Protection

  • Wi-Fi 6 wireless for modern device connectivity
  • 9 × 2.5 Gigabit Ethernet ports for high-speed wired links
  • 8 GB LPDDR5 memory for responsive firewall processing
  • 64 GB UFS 2.1 storage for logs and firmware
  • Fanless desktop design for silent operation in noise-sensitive areas

Desktop firewall for distributed networks

The Sophos XGS 128w is a desktop security appliance that combines wired and wireless connectivity for branch offices and small sites. It runs an Intel x86 CPU with 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage. Nine 2.5 Gigabit Ethernet copper ports and one SFP fiber port provide flexible uplinks, while integrated Wi-Fi 6 serves wireless clients directly.

Fanless operation with low power draw

A fanless design makes the unit silent, suited to noise-sensitive environments such as open-plan offices or retail spaces. The redesigned architecture reduces power consumption by 50 percent compared with earlier desktop models. Mean time between failures is rated at 228,927 hours, reflecting the solid-state construction and absence of moving parts.

Bundled Xstream Protection licence stack

The included one-year Xstream Protection bundle activates Base Licence, Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, DNS Protection, MDR and third-party threat feeds, NDR Essential Protection and Enhanced Support. These licences enable TLS 1.3 inspection, sandboxing, FastPath application acceleration and SD-WAN orchestration without separate purchases. A COM RJ45 port, a COM Micro-USB port with cable, a front USB 2.0 port and a rear USB 3.0 port are also supplied for local management and peripheral attachment.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $1,610.99
Pricier than about 70% of the 669 comparable items (median $806.99).

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 128(w)
Part numberXY128Z12ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired + Wireless
Connectivity
Wireless typeWi-Fi 6/802.11ax
Ethernet speed2.5 Gigabit Ethernet
Ports & slots
Port count9 × 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Size & build
Product dimensions320 × 212 × 44 mm
Product weight2.4 kg / 5.29 lb (unpacked)
3.9 kg / 8.6 lb (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Questions about this item

How do I mount the 320 x 212 x 44 mm desktop chassis and connect the 9 x 2.5GE copper ports, and which step is most often missed?

Place the unit on a flat surface or shelf with at least 50 mm clearance at the sides and rear for passive cooling; the step most often missed is leaving that airflow gap because the chassis is fanless and relies entirely on convection.

What component will need replacement first during the 228,927-hour MTBF lifespan?

The internal 64 GB UFS 2.1 storage is the only non-redundant moving-part-free component that wears with write cycles; plan to refresh the appliance when log retention or firmware updates exceed its endurance.

At what sustained throughput does the TLS 1.3 inspection engine become the bottleneck?

TLS inspection tops out at 1,450 Mbps, so any continuous encrypted traffic stream above that rate will queue at the inspection stage before the 19,100 Mbps firewall or 4,650 Mbps IPS limits are reached.

More in Firewall Appliances & VPN Gateways

Similar items