Sophos XGS 3100 Next-Gen Firewall with Xstream Protection, 1-Year (US Power Cord)
Powerful Protection and Performance Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection. XGS 3100 Featured Specifications Firewall Throughput: 38,000 MbpsFirewall IMIX: 22,000 MbpsIPS Throughput: 9,820 MbpsThreat Protection Throughput: 2,000 MbpsEthernet interfaces (fixed): 8 x GE copper, 2 x SFP fiber*, 2 x SFP+ 10 GbE fiber* * Transceivers (mini GBICs) sold separatelyNumber of Flexi Port slots: 1 Protection Bundle Included: Xstream Protection Sophos Next-Generation Firewalls Sophos XGS Series Appliances All XGS Series firewall appliances are built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xstream Flow Processor for targeted acceleration at the hardware level. This gives you all the flexibility and adaptability of an x86 based firewall plus a significant performance boost over legacy firewall designs. TLS 1.3 Inspection According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organizations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience. Sophos Firewall removes the blind spots caused by traffic by allowing you to use SSL inspection while maintaining performance efficiency. Deep Packet Inspection We believe you should never have to decide between security and performance. Sophos Firewall includes a highspeed deep packet inspection (DPI) engine to scan your traffic for threats without a proxy slowing down the process. The firewall stack can completely offload the processing to the DPI engine, significantly reducing latency and so improving overall efficiency. Sophos Firewall blocks the latest ransomware and breaches with high-performance streaming DPI including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix. Application Acceleration A significant portion of your network traffic is important business application traffic destined for branch offices, remote users, or cloud application servers. This trusted traffic, which needs no additional security scanning for threats or malware, can be intelligently directed to the FastPath, reducing latency, and optimizing overall performance. This provides added capacity and headroom for traffic that does need deep packet inspection. Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies - putting them on Xstream Protection Bundle Specifications Xstream Protection Bundle: Base License Networking, Wireless, Xstream Architecture, Unlimited Remote Access VPN, Site-to-Site VPN, reporting Network Protection Xstream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED VPN, reporting Web Protection Xstream TLS and DPI engine, Web Security and Control, Application Control, reporting Zero-Day Protection Machine Learning and Sandboxing File Analysis, reporting Central Orchestration SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MTR/XDR ready Enhanced Support 24/7 support, feature updates, advanced replacement hardware warranty for term XGS 3100 Detailed Specifications Performance XGS 3100 Firewall throughput 38,000 Mbps Firewall IMIX 22,000 Mbps Firewall Latency (64 byte UDP) 4 μs IPS throughput 9,820 Mbps Threat Protection throughput 2,000 Mbps NGFW 9,000 Mbps Concurrent connections 12,260,000 New connections/sec 186,500 IPsec VPN throughput 5,200 Mbps Xstream SSL/TLS Inspection 2,470 Mbps Xstream SSL/TLS Concurrent connections 55,296 Physical interfaces Storage (local quarantine/logs) Integrated min. 240 GB SATA-III SSD Ethernet interfaces (fixed) 8 x GE copper 2 x SFP fiber* 2 x SFP+ 10 GbE fiber* Bypass port pairs 1 Management ports 1 x RJ45 MGMT 1 x COM RJ45 1 x Micro-USB (cable incl.) Other I/O ports 2 x USB 3.0 (front) 1 x USB 2.0 (rear) Number of Flexi Port slots 1 Flexi Port modules (optional) 8 port GbE copper 8 port GbE SFP fiber 4 port 10 GbE SFP+ fiber 4 port GbE copper bypass (2 pairs) 4 port GbE copper PoE + 4 port GbE copper 4 port 2.5 GbE copper PoE 2 port GbE Fiber (LC) bypass + 4 port GbE SFP Fiber Max. total port density (incl. use of modules) 20 Max. Power-over-Ethernet (using Flexi Port module) 1 module: 4 ports, 60W max. Optional add-on connectivity SFP DSL module (VDSL2) SFP/SFP+ Transceivers Display Multi-function LCD module * Transceivers (mini GBICs) sold separately Physical specifications Mounting 1U rackmount (2 rackmount ears included) Dimensions Width x Height x Depth 438 x 44 x 405 mm Weight 4.7 kg/10.36 lbs (unpacked) 7 kg/15.43 lbs (packed) Environment Power supply Internal auto-ranging DC 100-240VAC, 3-6A@50-60 Hz External Redundant PSU Option Power consumption 3100: 50 W/170.77 BTU/hr (idle) 3300: 50 W/170.77 BTU/hr (idle)3100: 182 W/621.97 BTU/hr (max.) 3300: 201 W/686.68 BTU/hr (max.) PoE addition enabled 76 W/260 BTU/hr (max.) Operating temperature 0°C to 40°C (operating)-20°C to +70°C (storage) Humidity 10% to 90%, non-condensing Product Certifications Certifications CB, CE, UL, FCC, ISED, VCCI, CCC,KC, BSMI, RCM, NOM, Anatel