Standard Protection covers network and web security with reporting. Xstream Protection adds Zero Day Protection, DNS Protection, Central Orchestration, and Active Threat Response backed by Sophos MDR/XDR and third party threat feeds, plus NDR Essentials, which only runs on XGS hardware like the 4500. If you want the full lineup of protection Sophos built this appliance for, Xstream is the one to get.

Sophos recommends the XGS 4500 for large enterprise and distributed networks. With 80 Gbps of firewall throughput, 17.2 million concurrent connections, and 450,000 new connections per second, it's sized for organizations pushing heavy traffic across multiple sites or a busy data center edge, not a single small office.

Yes, the XGS 4500 supports Active/Passive high availability. One thing to plan for: Enhanced Plus support is required on the primary unit for the passive unit to qualify for Advanced RMA. Talk to one of our Sophos certified reps before you order if HA is part of the plan.

Firewall throughput, threat protection throughput, and Xstream SSL/TLS inspection are three different measurements. The 80 Gbps firewall throughput figure is measured with plain HTTP traffic, while the 31.85 Gbps threat protection number reflects firewall, IPS, and application control all running together, which is the figure that matters most in real production traffic. Our team can walk you through which number applies to your environment.

You can buy it directly, and orders placed before 3pm EST ship the same day. If you need custom bundling, volume pricing, or help sizing licensing, request a quote and a Sophos certified rep will get back to you fast.