Name: Sophos XGS 2300 with Xstream Protection - Avanet
SKU: sophos-xgs-2300-with-xstream-protection
Availability: InStock

Description Key features Services Resources Trial version Help with purchase

Description

Learn more about the
Sophos Xstream Protection

In this day and age of advancing cyber threats, securing your network requires advanced measures. That's where Sophos Xstream Protection comes in. It goes far beyond the features of a standard firewall and provides you with advanced layers of security. While the base license provides basic functionality, Sophos Xstream Protection unlocks its full potential by unlocking a range of advanced features. With Sophos Xstream Protection, you are well equipped to protect against increasingly complex cyber threats. Rely on Sophos Xstream Protection to secure your network in the ever-changing cyber landscape.

Key feature

Network Protection - This license provides top-notch protection for your network.

Intrusion Prevention System (IPS): This security module continuously monitors network traffic, including traffic between internal networks (VLANs). SSL/TLS Inspection integration enables IPS to scan decrypted traffic. When suspicious activities or attack patterns are detected, they are blocked immediately to ensure network security and data safety.
Advanced Threat Protection (ATP): Analyzes incoming and outgoing network traffic for threats. ATP allows you to detect compromised clients on your network and log or block traffic from these devices.
VPN enables secure connections for remote workstations and site-to-site networking via IPsec or SSLVPN. With VPN, employees can access corporate resources securely and efficiently from anywhere.
SD-WAN: optimizes network performance by intelligently leveraging multiple WAN links, maximizing bandwidth and minimizing latency. Unlike expensive MPLS lines, SD-WAN or the SD-RED VPN provides a simple and cost-effective way to establish and manage secure connections between multiple sites.
DoS & DDoS Protection: These security mechanisms detect and fend off overload attacks as well as targeted sabotage attempts aimed at crippling your IT infrastructure. Constant monitoring and real-time intervention of your network keeps it available and performing in critical situations.
Synchronized Security and the Security Heartbeat, the Sophos Firewall combined with Network Protection provides efficient communication between Sophos security solutions. These mechanisms improve the efficiency of threat detection and response by sharing security information between endpoints and network products.
Xstream TLS Inspection: This allows Sophos Firewall to inspect encrypted traffic to identify potential threats. This makes it possible to detect and block dangerous content hidden in encrypted connections without compromising the user's privacy.
Deep Packet Inspection (DPI) analyzes all network traffic, not just header information, to detect threats. Detection of malware, malicious applications, and other risks improves network security and enables targeted security policy adjustments. By using DPI in your Sophos Firewall, you can strengthen your defenses against cyberattacks.

Key feature

Web Protection - Decrypt, Monitor, Control and Analyze Internet Traffic

URL filtering: This security measure blocks access to dangerous or non-compliant websites. SophosLabs makes it possible to use an extensive database of millions of websites to ensure that users are kept away from malicious content.
Synchronized App Control: This innovative feature is part of Sophos's Synchronized Security. It enables detection, classification and control of unknown applications on the network. Seamless information sharing between different Sophos products allows network anomalies to be detected more quickly and responded to accordingly.
Xstream TLS Inspection: At a time when more and more web traffic is encrypted, Xstream TLS Inspection ensures that organizations are not blind to threats. It decrypts, analyzes and re-encrypts SSL/TLS traffic while maintaining user privacy and security. This ensures that encrypted threats do not go undetected.
Traffic shaping for web and applications: Traffic shaping and QoS tools in Sophos Web Protection enable organizations to use network resources efficiently. Targeted prioritization of traffic can optimize critical business applications and restrict non-essential traffic as needed.
Web Control: This tool provides unprecedented control over users' web access. An extensive URL filtering database and detailed filtering options allow organizations to target web access, improving both security and productivity.
Protection against web threats: Sophos Web Protection arms businesses against a wide range of online threats. From viruses to unwanted applications, the solution protects networks and users from malicious attacks and ensures they are protected in the ever-changing cyber threat environment.
Dual Engine Antivirus: Sophos Web Protection uses both its own and a second, independent malware detection engine from Avira. This ensures that all downloaded data is thoroughly scanned for any malware.
Content Control: Organizations can restrict or block the download of specific file types based on security and business requirements, with control based on file type, extension, and active content types.
Phishing Protection: Protection against pharming attacks is essential. Sophos Web Protection ensures that users are not redirected to fake websites that could steal their personal data.
HTTPS Scanning: Since much of the web traffic is encrypted, it is important to scan this traffic for threats. Sophos offers Xstream TLS Inspection to analyze encrypted traffic without compromising user security or privacy.
Application Control: This technology works at layer 7 level and detects and controls the data traffic of applications. Organizations can prioritize network traffic, block unwanted applications and optimize bandwidth usage to ensure a smooth network experience.
Time-based Web Browsing: IT administrators can use this feature to control users' web access based on schedules. Companies can set surfing time limits by user or group to ensure that the Internet is used productively during working hours.
Reporting: Sophos Web Protection's comprehensive reporting capabilities provide organizations with valuable insight into web and application activity. Detailed logs and analytics visualize web access, application usage, and detected threats, enabling IT managers to make informed decisions and continuously optimize security strategy.

Key feature

Enhanced support - access to Sophos experts 24/7 and extended warranty

Sophos Support: Sophos Support is always available to help you with technical challenges or questions. Open support tickets or call directly to the specialized Sophos team, available around the clock, 24/7. Benefit from the expertise of experienced technicians who will deal specifically with your request and ensure a speedy solution.
- Important note about using support: Enhanced Support is there for you if you believe that a feature of your firewall is not working correctly. However, it is not designed to fill gaps in your own knowledge of how to configure the firewall. In such cases, we will be happy to assist you according to our support conditions.
Firmware updates: Sophos Enhanced Support ensures that your firewall is always up-to-date thanks to regular firmware updates. So you always enjoy the latest features and the best possible security. Without this license only 3 firmware updates are included for free.
Security hotfixes: Sophos provides regular security hotfixes to quickly respond to newly identified threats and close security gaps. These hotfixes ensure that your systems remain robust against current and emerging security threats.
Pattern Updates: These updates ensure that your Sophos solution always has up-to-date detection patterns. This allows it to effectively identify and defend against known malware, viruses and other harmful content. Pattern Updates keeps your security infrastructure up to date and reliably protects you from threats.
Extended warranty: More security beyond the standard warranty. Enhanced Support extends the warranty period of your Sophos Firewall up to 5 years.
Advance exchange in the event of a warranty claim: In the event of a hardware defect, an uncomplicated advance exchange is available to you. This way, your firewall infrastructure is fully functional again as quickly as possible.

Key feature

Sophos Central Orchestration

SD-WAN: Sophos Central Orchestration lets you overcome the challenge of manually setting up VPN connections between multiple firewalls. The platform makes it possible to connect multiple firewalls in just a few clicks, which makes work much easier. Furthermore, it supports various network structures such as full mesh networks, hub-and-spoke models and tunnel setups. Built-in SD-WAN capabilities improve network performance and resilience, making network management both more efficient and more secure.

Central Firewall Reporting Advanced (Light) - Logs for 30 days: With the light version of Sophos Central Firewall Reporting Advanced, you get a powerful cloud-based reporting tool. It stores firewall data for 30 days and provides comprehensive insights into your network security. Get valuable insights into threats, compliance, and user activity with a variety of predefined and customizable reports.

Central MDR and XDR Connector: This feature includes the Sophos XDR and MDR Connector, which leverages firewall data for cross-product extended detection and response and provides a 24/7 managed threat response service. While Sophos MDR provides a 24/7 managed threat hunting and response service, Sophos XDR provides advanced detection and response capabilities for your own team. Your Sophos Firewall is configured to securely transmit relevant threat data to the cloud.

Avanet Services

Let us improve your safety

Our services are designed to help you keep your Sophos products running securely and reliably. In addition to the classic support for Sophos Firewalls or the Central platform, we offer the following services, which can be requested from us at any time:

Setup Services

Health Check

Upgrades

Workshops

Migrations

Firewall maintenance

SLA

Security audits

Request more information

Setup Services

Want to have your Sophos products set up by professionals? We support you during commissioning and configuration for smooth operation.

Migrations

You would like to change from your SG Firewall (UTM) to a XGS Firewall with the SFOS operating system? Thanks to our experience, we can also manage your changeover without any worries.

Health Check

You have set up your Sophos products yourself and would like us to check the configuration? We will check your settings and give our recommendation.

Workshops

Is it your job to be knowledgeable about Sophos products in your organization? We offer targeted training that is completely tailored to your needs.

Resources

Deepen your knowledge and learn more about the “Sophos XGS Firewall”

Sophos XGS Firewall – Datasheet

Sophos XGS Firewall – Brochure

Sophos Firewall – Solution Brief

Sophos Central Firewall – Datasheet

Next-Gen Firewall – Buyer's Guide

Cybersecurity System – Buyer's Guide

Sophos Central Firewall Reporting – Datasheet

Sophos Firewall and SD-WAN whitepaper

What’s New in Sophos Firewall – Beginner’s Guide

Firewall best Practice to block Ransomware – Whitepaper

Info Materials Sophos Firewall Thumbnail

EDUCATION & GOVERNMENT

Special awards for educational and government institutions

Sophos offers special discounts for schools and government institutions to meet specific budget requirements. A discount of at least 20 % can be expected.*

Ask us and we will prepare an offer for you completely free of charge and without obligation.

* Special pricing for educational and government institutions is only available in the DACH region.

Request special prices

Trial version

Try Sophos Firewall free

Familiarize yourself with the Sophos Firewall user interface before purchasing. See for yourself how intuitive this advanced operating system is and learn about all the features of Sophos Firewall.

Use the online demo for instant access directly in the browser, without installation. Or download the Sophos Firewall software for free (ISO) and install it on your own hardware.

Online demo Test free of charge

Use the following credentials to start your online demo. Username: demo / Password: XG@dem0user

Help with purchase

Are there any questions about the product?

It is better to ask again before buying, before you end up holding the wrong product in your hands.

Ask question

Technical Specifications

Compare the specifications of the Sophos XGS 2100 to 3300 in the table below. Not sure which firewall is right for you? We advise you free of charge and completely without obligation.

	XGS 2100 About the product	XGS 2300 About the product	XGS 3100 About the product	XGS 3300 About the product
CPU (Core/Threads)	AMD Ryzen R1505G (2/4)	AMD Ryzen R1606G (2/4)	AMD Ryzen V1780B (4/4)	AMD Ryzen V1780B (4/8)
CPU (Base/Boost Freq)	2.4 GHz	2.6 GHz	3.25 GHz	3.25 GHz
CPU (Memory)	8 GB (2400) DDR4	8 GB (2400) DDR4	12GB (2400) DDR4	16GB (2400) DDR4
NPU (Core/Threads)	Marvell Octeon CN8360 (16)	Marvell Octeon CN8360 (16)	Marvell Octeon CN8365 (20)	Marvell Octeon CN8365 (20)
NPU (Clock Frequency)	1.5 GHz	1.5 GHz	1.5 GHz	1.5 GHz
NPU (Memory)	4 GB DDR4	4 GB DDR4	4 GB DDR4	4 GB DDR4
Firewall Throughput	30 000 MBit/s	35 000 MBit/s	38 000 MBit/s	40 000 MBit/s
Firewall IMIX	15 900 MBit/s	20 000 MBit/s	22 000 MBit/s	24 500 MBit/s
Latency (64 byte UDP)	6 µs	4 μs	4 μs	4 μs
IPS Throughput	5 800 MBit/s	7 000 MBit/s	9 820 MBit/s	13 440 MBit/s
Throughput Threat Protection	1 250 MBit/s	1 400 MBit/s	2 000 MBit/s	2 770 MBit/s
Simultaneous connections	6 500 000	6 500 000	12 260 000	13 700 000
New connections/sec	134 700	148 000	186 500	257 800
IPsec VPN throughput	3000 MBit/s	3500 MBit/s	5200 MBit/s	6500 MBit/s
Xstream SSL/TLS Inspection	1 100 MBit/s	1 450 MBit/s	2 470 MBit/s	3 130 MBit/s
Concurrent connections XStream SSL/TLS	18 432	18 432	55 296	102 400
Storage (local quarantine/logs)	Integrated SATA-III SSD, min. 120 GB	Integrated SATA-III SSD, min. 120 GB	Integrated SATA-III SSD, min. 240 GB	Integrated SATA-III SSD, min. 240 GB
Ethernet interfaces (fixed)	8 GbE copper, 2 x SFP fiber optics	8 GbE copper, 2 x SFP fiber optics	8 x GE copper, 2 x SFP fiber, 2 x SFP+ 10 GbE fiber	8 x GE copper, 2 x SFP fiber, 2 x SFP+ 10 GbE fiber
Bypass Port Pairs	1	1	1	1
Administrative ports	1 x RJ45 MGMT, 1 x COM (RJ45), 1 x Micro-USB (cable incl.)	1 x RJ45 MGMT, 1 x COM (RJ45), 1 x Micro-USB (cable incl.)	1 x RJ45 MGMT, 1 x COM (RJ45), 1 x Micro-USB (cable incl.)	1 x RJ45 MGMT, 1 x COM (RJ45), 1 x Micro-USB (cable incl.)
Other I/O ports	2 x USB 3.0 (front), 1 x USB 2.0 (rear)	2 x USB 3.0 (front), 1 x USB 2.0 (rear)	2 x USB 3.0 (front), 1 x USB 2.0 (rear)	2 x USB 3.0 (front), 1 x USB 2.0 (rear)
Number of FleXi port slots	1	1	1	1
FleXi port modules (optional)	8-Port GbE Copper, 8-Port GbE SFP Fiber, 4-Port 10 GE SFP+ fiber, 4-port GbE copper Bypass (2 pairs), 4-port GbE copper PoE +, 4-port GbE copper, 4-port 2.5 GbE copper PoE	8-Port GbE Copper, 8-Port GbE SFP Fiber, 4-Port 10 GE SFP+ fiber, 4-port GbE copper Bypass (2 pairs), 4-port GbE copper PoE +, 4-port GbE copper, 4-port 2.5 GbE copper PoE	8-port GbE copper, 8-port GbE SFP fiber, 4-port 10 GE SFP+ fiber, 4-port GbE copper bypass (2 pairs), 4-port GbE copper PoE +, 4-port GbE copper, 4-port 2.5 GbE copper PoE	8-port GbE copper, 8-port GbE SFP fiber, 4-port 10 GE SFP+ fiber, 4-port GbE copper bypass (2 pairs), 4-port GbE copper PoE +, 4-port GbE copper, 4-port 2.5 GbE copper PoE
Max. Max. Total port density (incl. use of modules)	18	18	20	20
Max. Max. Power-over-Ethernet (with Flexi-Port module)	1 module: 4 ports, max. 60 W	1 module: 4 ports, max. 60 W	1 module: 4 ports, max. 60 W	1 module: 4 ports, max. 60 W
Connection modules (optional)	SFP DSL module (VDSL2), SFP/SFP+ transceiver	SFP DSL module (VDSL2), SFP/SFP+ transceiver	SFP DSL module (VDSL2), SFP/SFP+ transceiver	SFP DSL module (VDSL2), SFP/SFP+ transceiver
Display	Multifunction LCD module	Multifunction LCD module	Multifunction LCD module	Multifunction LCD module
Assembly	1U rack mountable (2 rack mount brackets included)	1U rack mountable (2 rack mount brackets included)	1U rack mountable (2 rack mount brackets included)	1U rack mountable (2 rack mount brackets included)
Dimensions width x depth x height	438 x 44 x 405 mm	438 x 44 x 405 mm	438 x 44 x 405 mm	438 x 44 x 405 mm
Weight	4.7 kg (without packing), 7 kg (with packing)	4.7 kg (without packing), 7 kg (with packing)	4.7 kg (without packing), 7 kg (with packing)	4.7 kg (without packing), 7 kg (with packing)
Power supply	Internal, automatic range adjustment DC 100-240 VAC, 3-6 A@50-60 Hz Option for external redundant power supply	Internal, automatic range adjustment DC 100-240 VAC, 3-6 A@50-60 Hz Option for external redundant power supply	Internal, automatic range adjustment DC 100-240 VAC, 3-6 A@50-60 Hz Option for external redundant power supply	Internal, automatic range adjustment DC 100-240 VAC, 3-6 A@50-60 Hz Option for external redundant power supply
Power consumption	43 W/146.86 BTU/h (idle), 162 W/533.5 BTU/h (full load)	45 W/153.7 BTU/h (idle), 167 W/570.74 BTU/h (full load)	50 W/170.77 BTU/h (idle), 182 W/621.97 BTU/h (full load)	50 W, 170.77 BTU/h (idle), 201 W/686.68 BTU/h (full load)
Incl. Use of PoE	76 W/260 BTU/hr (max.)	76 W/260 BTU/hr (max.)	76 W/260 BTU/hr (max.)	76 W/260 BTU/hr (max.)
Operating temperature	0 °C to 40 °C (operation), -20 °C to +70 °C (storage)	0 °C to 40 °C (operation), -20 °C to +70 °C (storage)	0 °C to 0 °C (operation), -20 °C to +70 °C (storage)	0 °C to 0 °C (operation), -20 °C to +70 °C (storage)
Humidity	10% to 90%, non-condensing	10% to 90%, non-condensing	10% to 90%, non-condensing	10% to 90%, non-condensing
Certifications	CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPI	CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPI	CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPI	CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPI