Sophos XGS 128 & 128w Firewall

Sophos XGS 128. Gen 2 desktop protection for the growing office.

The XGS 128 is a Gen 2 desktop firewall for small and midsize offices that have outgrown entry level hardware. It runs the full Sophos security stack on the Xstream architecture, accelerating trusted traffic while everything else gets inspected. The 128w model adds built-in wireless when you need it.

Shop XGS 128 Bundles DownLoad Datasheet

XGS 128 Key Specs

Firewall Throughput

19.1 Gbps

Threat Protection

4.0 Gbps

Copper Ports

9x 2.5 GbE + 1x SFP

IPsec VPN

15 Gbps

Expert Pre-Sales Advice Certified reps reply in 1 hour.

Config & Managed Services Skip the setup. We'll do it.

POs · Tax-Exempt · Net 30 Welcomed for Corp, Edu, & Gov.

Same-Day Shipping Order by 3pm EST, ships today.

Specifications

XGS 128 at a Glance

Performance

Firewall throughput: 19.1 Gbps
Threat protection: 4.0 Gbps
IPS: 4.65 Gbps
Concurrent connections: 6,000,000
New connections/sec: 72,250

Connectivity

Fixed ports: 9x 2.5 GbE copper plus 1x SFP fiber
Expansion: 1 module slot, optional 5G module (Gen 2)
USB: 1x USB 2.0 front, 1x USB 3.0 rear
Storage: 64 GB

VPN & TLS

IPsec VPN throughput: 15.05 Gbps
IPsec tunnels: 2,500
SSL VPN tunnels: 1,500
Xstream TLS inspection: 1,450 Mbps

Wireless & Build

Wireless (128w): Wi-Fi 6 (802.11ax), 2x2 MIMO, 2.4 and 5 GHz concurrent
Architecture: Gen 2 single CPU with Xstream FastPath on SFOS v21 and higher
Power: optional redundant power supply
Mounting: desktop, rackmount kit available

Not sure the XGS 128 is the right size?

Compare it against the rest of the XGS desktop lineup, from the fanless XGS 88 up to the XGS 138, and match throughput and port count to your user load before you buy.

Compare XGS Desktop Models

XGS 128 FAQ

Which protection license does the Sophos XGS 128 need?

Every XGS 128 ships with a perpetual base license that covers the firewall itself, IPsec and SSL VPN, wireless, and management through Sophos Central. To turn on active security you add a subscription bundle. Standard Protection layers on Network Protection, Web Protection, and Enhanced Support, which fits most small and midsize offices. Xstream Protection adds Zero-Day Protection and Central Orchestration on top, and it is the bundle Sophos and our team recommend for networks with heavy encrypted traffic or compliance requirements. As a Sophos Platinum Partner we can size the right bundle for your environment.

What is the difference between the XGS 128 and the XGS 128w?

The two appliances are identical in throughput, ports, and licensing. The only difference is wireless. The 128w adds an integrated Wi-Fi 6 (802.11ax) radio with two external antennas and 2x2 MIMO, running the 2.4 GHz and 5 GHz bands at the same time. Pick the 128w if you want the firewall to double as an access point at a small site. Pick the standard 128 if your wireless is handled by separate Sophos access points.

How do I know if the XGS 128 is the right size for my network?

Size to your user count and your real traffic, not just your ISP speed. The XGS 128 pushes 19.1 Gbps of raw firewall throughput and holds 4 Gbps of threat protection throughput with the full security stack running, which comfortably covers a growing office or busy branch site on a gigabit or multi-gigabit connection. If you inspect a lot of encrypted traffic, treat the 1,450 Mbps Xstream TLS inspection figure as your real ceiling. Not sure where you land? Talk to a Sophos-certified rep and we will match the model to your load.

Does the XGS 128 come pre-configured, or can you set it up for me?

Yes. Our team can pre-configure your XGS 128 before it ships so it arrives ready to drop in, and we offer professional services for full deployment, migration from an older XG or SG appliance, and ongoing management. Plenty of customers hand us the setup and the VPN or SSL configuration rather than doing it in house. Ask about our config and managed services when you request a quote.

What support and warranty options are available for the XGS 128?

Support is what keeps your firewall eligible for firmware updates and gives you access to Sophos technical support, so it is not optional on a production box. Enhanced Support gives you 24x7 coverage and is included in both the Standard and Xstream bundles. Enhanced Plus adds faster next business day hardware replacement for sites that cannot wait on a shipment. We can quote whichever tier matches how critical the site is.

Can I renew my existing Sophos license through Firewalls.com?

Yes. We handle new licenses, renewals, and multi-year terms for the XGS 128 and the rest of the Sophos lineup, including mixed fleets and HA pairs. Send us your serial number and current subscription and we will pull the correct renewal SKU so you do not end up with a coverage gap. Multi-year terms usually carry the best pricing.

Ready to deploy the XGS 128?

Tell us your user count, your ISP speed, and how much encrypted traffic you inspect, and a Sophos-certified rep will build a quote with the right bundle and support term. No pressure, just a straight answer.

Request a Quote

You'll always get our best prices when you're signed in!

Sophos XGS 128 with Xstream Protection, 1-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$1,756.94
17% OFF! $2,116.80

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128 with Xstream Protection, 3-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$3,093.39
17% OFF! $3,726.98

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128 with Xstream Protection, 5-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$4,429.40
17% OFF! $5,336.63

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128 with Standard Protection, 1-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$1,603.13
17% OFF! $1,931.48

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128 with Standard Protection, 3-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$2,631.93
17% OFF! $3,171.00

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128 with Standard Protection, 5-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$3,660.30
17% OFF! $4,410.00

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128 Security Appliance - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$1,089.38
17% OFF! $1,312.50

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128w Security Appliance - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$1,319.45
17% OFF! $1,589.70

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128w with Xstream Protection, 1-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$1,987.46
17% OFF! $2,394.53

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128w with Xstream Protection, 3-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$3,323.47
17% OFF! $4,004.18

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128w with Xstream Protection, 5-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$4,659.48
17% OFF! $5,613.83

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128w with Standard Protection, 1-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$1,833.64
17% OFF! $2,209.20

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128w with Standard Protection, 3-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$2,862.01
17% OFF! $3,448.20

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 128w with Standard Protection, 5-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1450 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$3,890.38
17% OFF! $4,687.20

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos Rackmount kit with adapter holder (for XGS 116(w)/118(w)/ 126(w)/128(w)/ 136(w)/138 models only)

Replacement parts, accessories, & extensible modules for Sophos hardware products.
Manufacturer Part #: RMXZTCHAB

Warehouse:
$195.55
3% OFF! $201.60

Product Details →

All orders placed after 3pm EST will ship on the next business day
RackMount.IT Rackmount Sophos XGS 118・XGS 128・XGS 138 - Dual PS

Install in under 5-minutes with super easy assembly

Bring ports to the front of the rack, where you need them

Perfectly fits listed models to tightly secure your appliance & power supply

No more downtime due to accidental power supply loss

Manufacturer Part #: RM-SR-T16
Warehouse:
$179.55
5% OFF! $189.00

Product Details →

All orders placed after 3pm EST will ship on the next business day

Hi there!

Shipping Location

Sophos XGS 128 & 128w Firewall

Sophos XGS 128. Gen 2 desktop protection for the growing office.

XGS 128 at a Glance

Performance

Connectivity

VPN & TLS

Wireless & Build

Not sure the XGS 128 is the right size?

XGS 128 FAQ

Ready to deploy the XGS 128?

You'll always get our best prices when you're signed in!

Sophos XGS 128 with Xstream Protection, 1-year - US power cord

Sophos XGS 128 with Xstream Protection, 3-year - US power cord

Sophos XGS 128 with Xstream Protection, 5-year - US power cord

Sophos XGS 128 with Standard Protection, 1-year - US power cord

Sophos XGS 128 with Standard Protection, 3-year - US power cord

Sophos XGS 128 with Standard Protection, 5-year - US power cord

Sophos XGS 128 Security Appliance - US power cord

Sophos XGS 128w Security Appliance - US power cord

Sophos XGS 128w with Xstream Protection, 1-year - US power cord

Sophos XGS 128w with Xstream Protection, 3-year - US power cord

Sophos XGS 128w with Xstream Protection, 5-year - US power cord

Sophos XGS 128w with Standard Protection, 1-year - US power cord

Sophos XGS 128w with Standard Protection, 3-year - US power cord

Sophos XGS 128w with Standard Protection, 5-year - US power cord

Sophos Rackmount kit with adapter holder (for XGS 116(w)/118(w)/ 126(w)/128(w)/ 136(w)/138 models only)

RackMount.IT Rackmount Sophos XGS 118・XGS 128・XGS 138 - Dual PS

Product Comparison

FAQ

Resources

Why Buy From Us?

Personal Information

Account Information

Please enter your email address below to receive a password reset link.

Expedited Delivery

Same Day Shipping

Sophos XGS 128 & 128w Firewall

Sophos XGS 128. Gen 2 desktop protection for the growing office.

XGS 128 at a Glance

Performance

Connectivity

VPN & TLS

Wireless & Build

Not sure the XGS 128 is the right size?

XGS 128 FAQ

Ready to deploy the XGS 128?

You'll always get our best prices when you're signed in!

Sophos XGS 128 with Xstream Protection, 1-year - US power cord

Sophos XGS 128 with Xstream Protection, 3-year - US power cord

Sophos XGS 128 with Xstream Protection, 5-year - US power cord

Sophos XGS 128 with Standard Protection, 1-year - US power cord

Sophos XGS 128 with Standard Protection, 3-year - US power cord

Sophos XGS 128 with Standard Protection, 5-year - US power cord

Sophos XGS 128 Security Appliance - US power cord

Sophos XGS 128w Security Appliance - US power cord

Sophos XGS 128w with Xstream Protection, 1-year - US power cord

Sophos XGS 128w with Xstream Protection, 3-year - US power cord

Sophos XGS 128w with Xstream Protection, 5-year - US power cord

Sophos XGS 128w with Standard Protection, 1-year - US power cord

Sophos XGS 128w with Standard Protection, 3-year - US power cord

Sophos XGS 128w with Standard Protection, 5-year - US power cord

Sophos Rackmount kit with adapter holder (for XGS 116(w)/118(w)/ 126(w)/128(w)/ 136(w)/138 models only)

RackMount.IT Rackmount Sophos XGS 118・XGS 128・XGS 138 - Dual PS

Product Comparison

FAQ

Resources

Why Buy From Us?

Request Emailed Quote