We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact white desktop firewall appliance with four RJ-45 ports and internal Wi-Fi 6 antenna

Sophos

Sophos XZ88ZZ36ZZPCUS XGS 88w firewall appliance 4 GB LPDDR5 16 GB eMMC Wi-Fi 6 4×2.5 GbE

SKU CH-PY2D-8MQ41 MPN XZ88ZZ36ZZPCUS

Desktop firewall appliance with 4 GB LPDDR5 memory, 16 GB eMMC storage, Wi‑Fi 6 wireless and four 2.5 GbE RJ‑45 ports

  • Port count4 × 2.5 GBase-T - RJ-45 1 x management - RJ-45 1 x managemen
  • Appliance typeFirewalls / Security Appliances
  • Wireless typeWi-Fi 6/802.11ax
  • Ethernet speed2.5 Gigabit Ethernet Ethernet, Fast Ethernet Gigabit Etherne
  • Product typeWired + Wireless
  • Key featuresForm Factor: Desktop CPU: Intel x86 CPU Memory: 4 GB LPDDR5

Model XGS 88W

Model 3-Year Standard Protection

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • Four 2.5 GbE ports deliver high-speed wired connectivity
  • Wi-Fi 6 built-in provides modern wireless access for devices

Sophos XGS 88w firewall appliance

The Sophos XGS 88w is a desktop firewall appliance that combines wired and wireless connectivity in a fanless chassis. It integrates a 2x2 Wi-Fi 6 radio, four 2.5 GBase-T ports and a dedicated management port. An Intel x86 CPU with 4 GB LPDDR5 memory and 16 GB eMMC storage runs the security stack. The unit is aimed at small offices or branch locations that need encrypted traffic inspection and wireless access in one box.

2.5 GbE ports and Wi-Fi 6 upgrade

The appliance replaces older 1 GbE firewalls by providing 2.5 GbE LAN interfaces and Wi-Fi 6 for higher client density. The jump is worth it when encrypted traffic volumes push legacy units past their TLS inspection limits of a few hundred megabits. It also suits sites that previously ran separate access points and want a single managed device. Buyers who need expansion slots, a second wireless radio or higher VPN throughput should look elsewhere.

4 GB LPDDR5 and 16 GB eMMC headroom

The 4 GB LPDDR5 memory and 16 GB eMMC storage handle the bundled Standard Protect licence pack including IPS, web filtering and TLS 1.3 inspection at 600 Mbps. Firewall IMIX throughput reaches 6 500 Mbps and threat protection runs at 2 000 Mbps. IPsec VPN peaks at 6 000 Mbps. The platform runs out when concurrent inspected sessions exceed the memory budget or when log retention needs exceed the onboard eMMC capacity.

How it compares

Measured against everything we stock in Firewall Appliances & VPN Gateways, at today’s prices. Recalculated every night.

Price $923.99
Typical for this category: the median of 669 items is $806.99.

Specifications

Product
Brand nameSophos
Product lineXGS
Model nameXGS 88(w)
Part numberXG88ZZ00ZZPCUS
Appliance typeFirewalls / Security Appliances
Product typeWired + Wireless
Connectivity
Wireless typeWi-Fi 6/802.11ax
Ethernet speed2.5 Gigabit Ethernet
Ethernet, Fast Ethernet
Gigabit Ethernet
Ports & slots
Port count4 × 2.5 GBase-T - RJ-45
1 x management - RJ-45
1 x management (micro-USB) - Type B
1 x USB 3.0 - Type A
1 x USB 2.0 - Type A
Size & build
Product dimensions200 × 180 × 44 mm
Product weight1.4 kg / 3.08 lb (unpacked)
2 kg /4.41 lb (packed)
Shipping weight2.77 kg
Package size277 × 249 × 117 mm

Other versions of this model

5 more in the same range

Questions about this item

What desktop clearance does the 200 x 180 x 44 mm chassis need?

The unit measures 200 mm wide, 180 mm deep and 44 mm high, so allow at least that footprint plus cable space for the four 2.5 GbE RJ-45 ports, management RJ-45, micro-USB console, USB 3.0 and USB 2.0 connectors on the rear.

Which step is often missed when registering the appliance to Sophos Central?

After connecting the management port or Wi-Fi 6 interface, you must claim the device in Sophos Central using the serial number on the label before the 3-year Standard Protect licence activates.

When should the 16 GB eMMC storage be checked for wear?

The 16 GB eMMC holds firmware, logs and signatures; monitor disk usage in the web admin and plan replacement if reported health drops below the vendor threshold, typically after several years of continuous logging.

More in Firewall Appliances & VPN Gateways

Similar items