Sophos XGS 3100 Network Security/Firewall Appliance

The Sophos Firewall Xstream architecture is engineered to deliver extreme levels of visibility, protection, and performance to help address some of the greatest challenges facing network administrators today.

Xstream Protection:
Sophos Firewall’s Xstream architecture protects your network from the latest threats while accelerating your important SaaS, SD-WAN, and cloud application traffic.

TLS 1.3 Decryption:
Remove an enormous blind spot with intelligent TLS inspection that’s fast and effective, supporting the latest standards with extensive exceptions and point-and-click policy tools to make your job easy.

Deep Packet Inspection:
Stop the latest ransomware and breaches with high-performance streaming deep packet inspection, including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

Application Acceleration:
Accelerate your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies, putting them on the Xstream FastPath to optimize performance.

Xstream SD-WAN:
The latest SD-WAN capabilities in Sophos Firewall enable extreme network performance, flexibility, and resiliency.

Xstream FastPath Acceleration:
Accelerate SD-WAN IPsec VPN tunnel flows taking full advantage of the hardware crypto capabilities in XGS Series appliances.

Performance-Based Routing:
Automatically optimize routing and rerouting of traffic based on WAN Link performance (latency, jitter, loss) in real time with zero impact.

Point-and-Click Orchestration:
Easily set up the most complex hub-and-spoke or full mesh SD-WAN overlay networks with full tunnel redundancy with just a few clicks.

Powerful Performance:
The XGS Series delivers Xstream performance at every price point to power the protection you need for today’s diverse, distributed, and encrypted networks.

Powered by Xstream:
Accelerate and offload your important SaaS, SD-WAN, and cloud traffic at the hardware level, while adding performance headroom for TLS and deep packet inspection with integrated Xstream Flow Processors.

High-Speed Connectivity:
Customize your firewall’s already versatile connectivity options with an extensive range of add-on modules for high-speed copper, fiber, Power over Ethernet (PoE), 4G/5G, and Wi-Fi.

Performance by Design:
From the smallest entry-level device to our enterprise and campus edge models, every firewall is purpose-built to handle the most demanding workloads with a dual processor architecture, generous memory provisioning, and high-performance solid-state storage.

• Form Factor: Rail-mountable
• Compatible Rack Unit: 1U
• Networking Interfaces: (8) 10/100/1000 Mbps RJ45 Ethernet Ports, (2) 1G SFP Ports, (2) 10G SFP+ Ports
• Management Interfaces: (1) RJ45 MGMT, (1) COM RJ45, (1) COM Micro-USB
• Bypass Port Pairs (Fixed): 1
• I/O Interfaces: (2) USB 2.0 (front), (1) USB 3.0 (rear)
• Firewall Throughput: 47,000 Mbps
• TLS Inspection: 2,470 Mbps
• IPS Throughput: 10,500 Mbps
• IPsec VPN Throughput: 25,000 Mbps
• Next Gen Firewall (NGFW) Throughput: 9,000 Mbps
• Threat Protection Throughput: 2,000 Mbps
• Latency (64 BYTE UDP): 4 µs
• Weight (Approximate): 4.70 kg