
Sophos XGS 136 Next-Gen Firewall with Xstream Protection, 5-Year (US Power Cord)
Powerful Protection and Performance Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection. XGS 136 Featured Specifications Firewall Throughput: 11,500 MbpsFirewall IMIX: 4,700 MbpsIPS Throughput: 3,300 MbpsThreat Protection Throughput: 1,000 MbpsEthernet interfaces (fixed): 10 x GbE copper 2 x 2.5 GbE copper 2 x SFP fiber* (*sold separately)Power-over-Ethernet (fixed): 2 x 2.5 GbE (30W max.) Protection Bundle Included: Xstream Protection Sophos Next-Generation Firewalls Sophos XGS Series Appliances All XGS Series firewall appliances are built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xstream Flow Processor for targeted acceleration at the hardware level. This gives you all the flexibility and adaptability of an x86 based firewall plus a significant performance boost over legacy firewall designs. TLS 1.3 Inspection According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organizations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience. Sophos Firewall removes the blind spots caused by traffic by allowing you to use SSL inspection while maintaining performance efficiency. Deep Packet Inspection We believe you should never have to decide between security and performance. Sophos Firewall includes a highspeed deep packet inspection (DPI) engine to scan your traffic for threats without a proxy slowing down the process. The firewall stack can completely offload the processing to the DPI engine, significantly reducing latency and so improving overall efficiency. Sophos Firewall blocks the latest ransomware and breaches with high-performance streaming DPI including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix. Application Acceleration A significant portion of your network traffic is important business application traffic destined for branch offices, remote users, or cloud application servers. This trusted traffic, which needs no additional security scanning for threats or malware, can be intelligently directed to the FastPath, reducing latency, and optimizing overall performance. This provides added capacity and headroom for traffic that does need deep packet inspection. Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies - putting them on Xstream Protection Bundle Specifications Xstream Protection Bundle: Base License Networking, Wireless, Xstream Architecture, Unlimited Remote Access VPN, Site-to-Site VPN, reporting Network Protection Xstream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED VPN, reporting Web Protection Xstream TLS and DPI engine, Web Security and Control, Application Control, reporting Zero-Day Protection Machine Learning and Sandboxing File Analysis, reporting Central Orchestration SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MTR/XDR ready Enhanced Support 24/7 support, feature updates, advanced replacement hardware warranty for term XGS 136 Detailed Specifications Performance XGS 136(w) Firewall throughput 11,500 Mbps Firewall IMIX 4,700 Mbps Firewall Latency (64 byte UDP) 8 μs IPS throughput 3,300 Mbps Threat Protection throughput 1,000 Mbps NGFW 3,000 Mbps Concurrent connections 6,400,000 New connections/sec 74,500 IPsec VPN throughput 2,500 Mbps Xstream SSL/TLS Inspection 950 Mbps Xstream SSL/TLS Concurrent connections 18,432 Physical interfaces Storage (local quarantine/logs) Integrated 64 GB SSD Ethernet interfaces (fixed) 10 x GbE copper 2 x 2.5 GbE copper 2 x SFP fiber* * SFP transceivers sold separately Power-over-Ethernet (fixed) 2 x 2.5 GbE (30W max.) Management ports 1 x COM RJ45 1 x Micro-USB (cable incl.) Other I/O ports 1 x USB 2.0 (front) 1 x USB 3.0 (rear) Number of expansion slots 1 Optional add-on connectivity SFP DSL module (VDSL2) 3G/4G module Second Wi-Fi radio (XGS 126w/136w only) SFP transceivers Physical specifications Mounting Rackmount kit available (to be ordered separately) Dimensions Width x Height x Depth 320 x 44 x 213 mm Weight 2.4 kg/5.29 lbs (unpacked) 4.4 kg/9.70 lbs (packed) (w-model minimally higher) Environment Power supply External auto-ranging AC-DC 100-240VAC, 2.5A@50-60 Hz 12VDC, 12.5A, 150W Optional second redundant power supply Power consumption 136: 30 W/102 BTU/hr (idle) 136w: 32 W/109 BTU/hr (idle) 136: 62 W/212 BTU/hr (max.) 136w: 65 W/222 BTU/hr (max.) PoE addition enabled 76 W/260 BTU/hr (max.) Operating temperature 0°C to 40°C (operating) -20°C to +70°C (storage) Humidity 10% to 90%, non-condensing Product Certifications Certifications CB, CE, UL, FCC, ISED, VCCI, CCC, KC, BSMI, NOM, Anatel