Sophos XGS 138 Firewall Security Appliance

Sophos XGS 138. The top of the XGS desktop lineup.

The XGS 138 sits at the top of Sophos's desktop firewall range, built for busy branch offices and midsize networks that have outgrown a basic box. You get a refreshed dual-processor design, 10GbE fiber, and built-in PoE to power access points or cameras straight from the appliance.

Shop XGS 138 Bundles DownLoad Datasheet

XGS 138 Key Specs

Firewall Throughput

19.1 Gbps

Threat Protection

4.75 Gbps

Fixed Interfaces

4x GE, 2x 2.5GbE, 2x SFP+ 10GbE

Built-in PoE

2 ports, 30W max each

Expert Pre-Sales Advice Certified reps reply in 1 hour.

Config & Managed Services Skip the setup. We'll do it.

POs · Tax-Exempt · Net 30 Welcomed for Corp, Edu, & Gov.

Same-Day Shipping Order by 3pm EST, ships today.

Specifications

XGS 138 at a Glance

Performance

19.1 Gbps firewall throughput and 10.5 Gbps Firewall IMIX.
5.85 Gbps IPS and 4.75 Gbps threat protection.
6.6 Gbps IPsec VPN with 2,500 site-to-site tunnels.
6.55 million concurrent connections.

Connectivity

Fixed: 4x GE copper, 2x 2.5GbE copper, 2x SFP+ 10GbE fiber.
Two 2.5GbE PoE ports, 30W max per port.
One expansion bay for an optional Gen.2 5G module.
1x USB 2.0 and 1x USB 3.0.

Architecture & Power

Refreshed dual-processor design for a strong cost-to-performance ratio.
64 GB M.2 storage for on-box logging and quarantine.
Optional second power supply for redundancy.
Desktop or rackmount with the optional kit.

Management & Protection

Managed free through Sophos Central in the cloud.
Runs the Xstream streaming DPI engine with TLS 1.3 inspection.
Available with Standard or Xstream Protection bundles.
Manages Sophos APs and switches from the same console.

Is the XGS 138 the right size for your network?

The 138 tops the XGS desktop range with 10GbE fiber, built-in PoE, and dual-processor performance. If you want to see how it stacks up against the XGS 88 through 128, compare the full desktop lineup side by side.

Compare the XGS Series

XGS 138 FAQ

What is the difference between Xstream Protection and Standard Protection on the XGS 138?

Both bundles run on the same Xstream architecture and include network and web protection, unlimited VPN, SD-WAN, and Enhanced Support. Xstream Protection adds the pieces that matter for busier or hybrid networks: Zero-Day Protection with cloud sandboxing, DNS Protection, and Central Orchestration for SD-WAN and 30-day cloud reporting. If you plan to run TLS inspection or manage several firewalls from Sophos Central, Xstream is the bundle we recommend. Standard Protection covers the essentials at a lower cost. Not sure which fits? Talk to a Sophos-certified expert and we'll size it with you.

Does the XGS 138 come with everything I need, or do I have to add a subscription?

The XGS 138 ships with a perpetual base license that covers core firewall features, unlimited IPsec and SSL VPN, wireless, and cloud management through Sophos Central. On its own the base license routes and firewalls traffic, but it does not include IPS, web filtering, or advanced threat protection. To get the security most organizations are buying a firewall for, you add a Standard or Xstream Protection bundle, which also includes the support you need for firmware updates. We sell the XGS 138 as a package that pairs the appliance with a subscription, so you get both in one SKU.

Can the XGS 138 power and manage Sophos access points?

Yes. The XGS 138 has two built-in 2.5GbE PoE ports rated up to 30W each, so you can power a Sophos access point, IP camera, or VoIP phone straight from the appliance without a separate injector or switch. It also manages Sophos AP6 access points and CS-Series switches from the same Sophos Central console, so your firewall, Wi-Fi, and switching all live in one place.

Is Firewalls.com an authorized Sophos partner?

Yes. Firewalls.com is an authorized Sophos partner, so every XGS 138 we sell comes with a valid factory warranty and full eligibility for licensing, renewals, RMAs, and Sophos support. Because we buy direct, you also get manufacturer-direct pricing and a certified rep who can help you quote, configure, and deploy.

How do XGS 138 license renewals work?

Renewing is straightforward. When your XGS 138 subscription is coming up, we can quote a 1, 2, or 3 year renewal on the same bundle you already run, and multi-year terms lock in the best value while avoiding a coverage gap. Send us your serial number or existing order number and your rep will pull the exact renewal SKU. If your current term has already lapsed, we can still get you re-licensed, so reach out and we'll sort it.

How fast does the XGS 138 ship, and can I confirm stock first?

Most in-stock XGS 138 orders placed by 3pm EST ship the same business day from our U.S. warehouse, and you pick the carrier and service level at checkout, including overnight. If you need it on-site by a specific date or want to confirm stock before you order, message us or request a quote and we'll give you a straight answer on availability.

Ready to deploy the Sophos XGS 138?

Tell us your throughput needs, user count, and licensing term, and a Sophos-certified rep will build a quote that fits. POs, tax-exempt orders, and Net 30 welcome.

Request a Quote

You'll always get our best prices when you're signed in!

Sophos XGS 138 with Xstream Protection, 1-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1700 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$2,430.18
17% OFF! $2,927.93

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 138 with Xstream Protection, 3-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1700 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$4,537.03
17% OFF! $5,466.30

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 138 with Xstream Protection, 5-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1700 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$6,643.44
17% OFF! $8,004.15

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 138 with Standard Protection, 1-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1700 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$2,187.47
17% OFF! $2,635.50

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 138 with Standard Protection, 3-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1700 Mbps*

Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$3,808.89
17% OFF! $4,589.03

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 138 with Standard Protection, 5-year - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1700 Mbps*

Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$5,429.88
17% OFF! $6,542.03

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos XGS 138 Security Appliance - US power cord

Recommended for Home Networks/Teleworker

ISP Connection Speeds up to 1700 Mbps*
Content Filtering to control access to Internet content

Gateway Antivirus to protect you from viruses & ransomware

Intrusion Prevention Services to detect network attacks

24x7 Technical Services for support, firmware, and warranty

Zero Day Protection from unknown threats

Cloud Management for reporting & remote management

Optional Configuration Support to get you secure

Optional Hassle-Free Management to keep you secure
Warehouse:
$1,377.41
17% OFF! $1,659.53

Product Details →

All orders placed after 3pm EST will ship on the next business day
Sophos Rackmount kit with adapter holder (for XGS 116(w)/118(w)/ 126(w)/128(w)/ 136(w)/138 models only)

Replacement parts, accessories, & extensible modules for Sophos hardware products.
Manufacturer Part #: RMXZTCHAB

Warehouse:
$195.55
3% OFF! $201.60

Product Details →

All orders placed after 3pm EST will ship on the next business day
RackMount.IT Rackmount Sophos XGS 118・XGS 128・XGS 138 - Dual PS

Install in under 5-minutes with super easy assembly

Bring ports to the front of the rack, where you need them

Perfectly fits listed models to tightly secure your appliance & power supply

No more downtime due to accidental power supply loss

Manufacturer Part #: RM-SR-T16
Warehouse:
$179.55
5% OFF! $189.00

Product Details →

All orders placed after 3pm EST will ship on the next business day

Hi there!

Shipping Location

Sophos XGS 138 Firewall Security Appliance

Sophos XGS 138. The top of the XGS desktop lineup.

XGS 138 at a Glance

Performance

Connectivity

Architecture & Power

Management & Protection

Is the XGS 138 the right size for your network?

XGS 138 FAQ

Ready to deploy the Sophos XGS 138?

You'll always get our best prices when you're signed in!

Sophos XGS 138 with Xstream Protection, 1-year - US power cord

Sophos XGS 138 with Xstream Protection, 3-year - US power cord

Sophos XGS 138 with Xstream Protection, 5-year - US power cord

Sophos XGS 138 with Standard Protection, 1-year - US power cord

Sophos XGS 138 with Standard Protection, 3-year - US power cord

Sophos XGS 138 with Standard Protection, 5-year - US power cord

Sophos XGS 138 Security Appliance - US power cord

Sophos Rackmount kit with adapter holder (for XGS 116(w)/118(w)/ 126(w)/128(w)/ 136(w)/138 models only)

RackMount.IT Rackmount Sophos XGS 118・XGS 128・XGS 138 - Dual PS

Product Comparison

FAQ

Resources

Why Buy From Us?

Personal Information

Account Information

Please enter your email address below to receive a password reset link.

Expedited Delivery

Same Day Shipping

Sophos XGS 138 Firewall Security Appliance

Sophos XGS 138. The top of the XGS desktop lineup.

XGS 138 at a Glance

Performance

Connectivity

Architecture & Power

Management & Protection

Is the XGS 138 the right size for your network?

XGS 138 FAQ

Ready to deploy the Sophos XGS 138?

You'll always get our best prices when you're signed in!

Sophos XGS 138 with Xstream Protection, 1-year - US power cord

Sophos XGS 138 with Xstream Protection, 3-year - US power cord

Sophos XGS 138 with Xstream Protection, 5-year - US power cord

Sophos XGS 138 with Standard Protection, 1-year - US power cord

Sophos XGS 138 with Standard Protection, 3-year - US power cord

Sophos XGS 138 with Standard Protection, 5-year - US power cord

Sophos XGS 138 Security Appliance - US power cord

Sophos Rackmount kit with adapter holder (for XGS 116(w)/118(w)/ 126(w)/128(w)/ 136(w)/138 models only)

RackMount.IT Rackmount Sophos XGS 118・XGS 128・XGS 138 - Dual PS

Product Comparison

FAQ

Resources

Why Buy From Us?

Request Emailed Quote