Shopping Cart

No products in the cart.

XGS 87

Sophos XGS 87 Firewall Appliance About the product

XGS 107

Sophos XGS 107 Firewall Appliance About the product

XGS 116

Sophos XGS 116 Firewall Appliance About the product

XGS 126

Sophos XGS 126 Firewall Appliance About the product

XGS 136

Sophos XGS 136 Firewall Appliance About the product
CPU (Core/Threads) x86 AMD CPU x86 AMD CPU x86 AMD CPU x86 AMD CPU x86 AMD CPU
CPU (Memory) 4 GB DDR4 4 GB DDR4 4 GB DDR4 6 GB DDR4 8 GB DDR4
NPU (Core/Threads) Marvell NPU Marvell NPU Marvell NPU Marvell NPU Marvell NPU
NPU (Memory) 2 GB DDR4 2 GB DDR4 4 GB DDR4 4 GB DDR4 4 GB DDR4
Firewall Throughput 3 700 MBit/s 7 000 MBit/s 7 700 MBit/s 10 500 MBit/s 11 500 MBit/s
Firewall IMIX 2 500 MBit/s 2 900 MBit/s 3 500 MBit/s 4 000 MBit/s 4 700 MBit/s
Latency (64 byte UDP) 6 µs 6 µs 8 μs 8 μs 8 μs
IPS Throughput 1 015 MBit/s 1 355 MBit/s 2 000 MBit/s 2 600 MBit/s 3 300 MBit/s
Throughput Threat Protection 240 MBit/s 330 MBit/s 685 MBit/s 900 MBit/s 1 000 MBit/s
Simultaneous connections 1 600'000 1 600'000 1 600'000 5 000 000 6 400 000
New connections/sec 35 700 44 400 61 500 69 900 74 500
IPsec VPN throughput 750 MBit/s 900 MBit/s 1100 MBit/s 1800 MBit/s 2500 MBit/s
Xstream SSL/TLS Inspection 375 MBit/s 420 MBit/s 650 MBit/s 800 MBit/s 950 MBit/s
Concurrent connections XStream SSL/TLS 8192 8192 8192 12288 18 432
Storage (local quarantine/logs) 16 GB eMMC Integrated 64 GB SSD Integrated 64 GB SSD Integrated 64 GB SSD Integrated 64 GB SSD
Ethernet interfaces (fixed) 4 GbE copper, 1 x SFP fiber optic 8 GbE copper, 1 x SFP fiber optic 8 GbE copper 1 GbE SFP 12 GbE copper, 2 x SFP fiber optics 10 GbE copper, 2-port 2.5 GbE copper, 2 x SFP fiber
Power over Ethernet (min.) - - 1 x GbE 803.2at (max. 30 W) 2 x GbE (max. 30 W per port) 2 x 2.5 GbE (max. 30 W per port)
Administrative ports 1 x COM (RJ45), 1 x Micro-USB (cable incl.) 1 x COM (RJ45), 1 x Micro-USB (cable incl.) 1 x COM (RJ45), 1 x Micro-USB (cable incl.) 1 x COM (RJ45), 1 x Micro-USB (cable incl.) 1 x COM (RJ45), 1 x Micro-USB (cable incl.)
Other I/O ports 1 x USB 2.0 (front), 1 x USB 3.0 (rear) 1 x USB 2.0 (front), 1 x USB 3.0 (rear) 1 x USB 2.0 (front), 1 x USB 3.0 (rear) 1 x USB 2.0 (front), 1 x USB 3.0 (rear) 1 x USB 2.0 (front), 1 x USB 3.0 (rear)
Number of expansion slots - - 1 1 1
Connection modules (optional) SFP DSL module (VDSL2), SFP transceiver SFP DSL module (VDSL2), SFP transceiver SFP DSL module (VDSL2), 3G/4G module, SFP transceiver SFP DSL module (VDSL2), 3G/4G module, SFP transceiver SFP DSL module (VDSL2), 3G/4G module, SFP transceiver
Assembly Rack mount kit available (must be ordered separately) Rack mount kit available (must be ordered separately) Rack mount kit available (must be ordered separately) Rack mount kit available (must be ordered separately) Rack mount kit available (must be ordered separately)
Dimensions width x depth x height 230 x 44 x 205.5 mm 230 x 44 x 205.5 mm 320 x 44 x 213 mm 320 x 44 x 213 mm 320 x 44 x 213 mm
Weight 1.36 kg (without packing) 2.75 kg (with packing) 1.4 kg (without packing), 2.8 kg (with packing) 2.2 kg (without packaging) 4.2 kg (with packaging) 2.4 kg (without packaging) 4.4 kg (with packaging) 2.4 kg (without packaging) 4.4 kg (with packaging)
Power supply External, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W External, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W Optional second redundant power supply Power supply External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply
Power consumption 23.2 W/79.16 BTU/h (87) (idle) 43.4 W/148.09 BTU/h (full load) 26.1 W/89.06 BTU/h (idle), 53.9 W/183.91 BTU/h (full load) 28 W, 96 BTU/h (idle), 57 W/195 BTU/h (full load) 30 W/102 BTU/h (idle), 59 W/202 BTU/h (full load) 30 W/102 BTU/h (idle), 62 W/212 BTU/h (full load)
Incl. Use of PoE - - 38 W/130 BTU/h (full load) 76 W/260 BTU/hr (max.) 76 W/260 BTU/hr (max.)
Operating temperature 0 °C to 40 °C (operation), -20 to +70 °C (storage) 0 °C to 40 °C (operation), -20 to +70 °C (storage) 0 °C to 40 °C (operation), -20 to +70 °C (storage) 0 °C to 40 °C (operation), -20 to +70 °C (storage) 0 °C to 40 °C (operation), -20 to +70 °C (storage)
Humidity 10% to 90%, non-condensing 10% to 90%, non-condensing 10% to 90%, non-condensing 10% to 90%, non-condensing 10% to 90%, non-condensing
🔍
Sophos XGS 87 Appliance
Sophos XGS 87 Appliance
  1. Sophos XGS 87 Appliance
  2. Sophos XGS 87 Appliance

Sophos XGS 87 Appliance

411,75 €

New model available!

A successor model is available for this product, which offers significantly higher performance for the same price - the performance has been almost doubled. We therefore recommend opting for the newer model. You can find all the information you need in our blog post →

Licensing
Sophos Base License

1-year warranty, 3 SFOS updates included, 90 Days manufacturer support

Free of charge

Sophos Standard Protection

Network Protection, Web Protection, Enhanced Support

Term — Months

License type

Subscription

With a subscription, we manage your firewall license for you. The license is renewed in 12-month increments as long as the subscription is active. 60 days before each renewal, we will inform you of the automatic renewal by e-mail. If this suits you, you don't need to do anything else; the license will continue to run seamlessly and you will receive a new invoice. If you do not wish to renew, a short reply to the reminder e-mail is sufficient and we will revoke the license at the end of the contract.

Important: Your firewall remains registered with us during the subscription period. This is only for license management - we have no access to your firewall! The central management of the firewall can still be linked to your account as normal. If you cancel the subscription, we will move the firewall registration back to your Central account.

Fixed term

With a fixed-term license, you take over the entire administration yourself. The firewall is registered directly to the end customer and you receive a license certificate from Sophos with an activation key. You must enter this manually in your Central Account to activate the license. The license expires after 12, 24 or 36 months and you must remember to renew it in time by ordering a new license from your Sophos partner. This process requires extra steps and attention to ensure that your firewall works seamlessly. In comparison, the subscription is much easier and more convenient, as everything runs automatically without you having to worry about it.
Sophos Xstream Protection

Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Enhanced Support

Term — Months

License type

Sophos Epic Protection

Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Email Protection, Web Server Protection, Enhanced Support

Term — Months

License type

Start date

Your fixed term license begins on the day Sophos completes order processing (usually between 1–2 business days) and expires at the end of the purchased term, regardless of when the software is activated and/or the hardware arrives.

Select a desired date when the term of your license should start.

Your subscription will start automatically on 01.06.2025. We will activate a trial license for the remaining days so that you can start using the firewall immediately.

Is the proposed start date too soon for you? Postpone the start of your subscription to a later date.

High availability

Downtimes are acceptable and no immediate replacement is required in the event of a hardware failure.

Get a second piece of hardware to improve the reliability of your network.

Delivery

Free shipping over 200 €
Delivery time
1-2 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
Availability
34in stock
64in stock
64in stock
64in stock
64in stock
64in stock
64in stock
64in stock
64in stock
Deliver to
SKU: XA8BTCHEU
Description Scope of delivery Technical specifications Licensing Sizing Guide Services Resources Trial version Accessories Help with purchase

Description

Learn more about the
Sophos XGS 87 Appliance

The XGS 87 is not able to support advanced features such as on-box reporting, dual scan engine scanning, WAF antivirus scanning, and message transfer agent (MTA) functionality. If you depend on these capabilities, we advise the XGS 107(w) or larger.

The XGS 87 belongs to the desktop variant of the XGS series. It has SFP for fiber connections and an integrated Ethernet interface. The devices in this range are perfect for small offices, small branch offices and retail stores.

The entire XGS series offers increased efficiency and performance. With the dedicated Xstream processor, data recognition is increased. In addition, the built-in and additional connection options facilitate subsequent adjustments to the infrastructure. The XGS 87 is equipped with TLS Inspection, Deep Packet Inspection and Application Acceleration to give you a powerful “See it. Stop it. Secure it” protection.

Scope of delivery

What is included in the scope of delivery?

Hardware

Sophos XGS 87

Sophos XGS 87 Firewall

Documents

Sophos Quick Start Guide XGS 87(w)/107(w) Thumbnail

Quick guide

Sophos Safety Instructions and Regulatory Compliance Thumbnail

Safety instructions

Accessories

Sophos Power Supply Thumbnail

Power supply

Micro USB, RJ45 Ethernet, Power Cable Thumbnail

Micro USB cable
RJ45 Ethernet cable
Power cable

Licenses

Sophos Base License Box

Sophos base license

Technical specifications

Sophos XGS 87 Series

The Sophos XGS 87 is particularly suitable for small offices, small branch offices and retail stores.

Connections and extensions

Front

XGS 87(w) Front panel with designations of the connection options

Back

XGS 87(w) Rear panel with designations of the connection options

Dimensions and weight

HEIGHT
4.4 cm

WIDTH
23.0 cm

DEEP
20.55 cm

WEIGHT
1.36 kg/3 lbs (unpacked)
2.75 kg/6.06 lbs (packed)

Sophos XGS 87(w) Dimensions

Manufacturer warranty and service

1 year warranty
With the purchase of this Sophos Firewall you get 1 year warranty as standard. The term "Warranty" means Avanet's warranty and Sophos's manufacturer 's warranty. With an active Enhanced Support license, the warranty period can be extended up to 5 years.

3 SFOS updates included
When purchasing Sophos Firewall without a license bundle, three SFOS firmware updates are included. To keep your Sophos Firewall up to date, an active Enhanced Support license is required. This can either be purchased separately with the firewall, or you can purchase the Sophos Firewall together with a license bundle that includes Enhanced Support.

90 days manufacturer support
If Sophos Firewall is purchased without Enhanced Support or a license bundle, vendor support is limited to 90 days.

Included functions

Basic license
The base license is included free with every Sophos Firewall and includes Xstream architecture, networking, wireless, SD-WAN, VPN and reporting. Read our detailed knowledge base article about the base license to find out if the free features are enough for you.

Central Management
Link your firewall to Central, Sophos' advanced cloud-based platform. Enjoy convenient features like fast alerts, backup management, one-click firmware updates, and smooth deployment of new firewalls. Dive into the exciting world of Sophos Central and experience efficient management of your security solutions!

Central Reporting
Enjoy free Central Reporting with up to 7 days of report data storage. You get access to robust reporting tools that let you visually map your network, Internet, and application activity and security over time.

Compare Desktop Firewalls

Performance

FIREWALL
3,850 Mbps

TLS INSPECTION
375 Mbps

FIREWALL IMIX
3,000 Mbps

IPS
1,200 Mbps

IPSEC VPN
3,000 Mbps

NGFW
700 Mbps

THREAT
PROTECTION
280 Mbps

LATENCY
(64 BYTE UDP)
6 µs

CONCURRENT CONNECTIONS
1.600.000

NEW CONNECTIONS/SEC
35.700

CONCURRENT
IPSEC-VPN-TUNNELS
500

CONCURRENT
SSL VPN TUNNEL
500

XSTREAM SSL/TLS INSPECTION
375 MBit/s

CONCURRENT CONNECTIONS
XSTREAM SSL/TLS
8.192

Understanding Sophos Firewall performance data correctly

Connectivity

STORAGE
16 GB eMMC

ETHERNET INTERFACES (FIXED)
4 x GbE copper
1 x SFP fiber

POWER-OVER ETHERNET (FIXED)
-

MANAGEMENT INTERFACES
1 x COM RJ45
1 x Micro-USB (cable incl.)

OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)

Modularity

OPTIONAL ADD-ON MODULES
SFP transceiver

Operating conditions

POWER SUPPLY
External, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W

POWER CONSUMPTION
23.2 W / 79.16 BTU/hr (idle)
43.4 W / 148.09 BTU/hr (max.)

OPERATING TEMPERATURE
0°C to 40°C (operating)
-20°C to +70°C (storage)

HUMIDITY
10% to 90%, non-condensing

Product Certifications

CERTIFICATIONS
CB, CE, UKCA, UL, FCC, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel, TEC

Licensing

Extend the range of functionality of the XGS 87

To increase the protection capabilities, you can also purchase the Sophos Firewall together with a license package. The following options are available:

Included free of charge

Extend range of features

Base license

Each Sophos XGS Firewall Appliance purchased individually includes the free base license, which provides basic security features:

1 year warranty

3 SFOS updates included

90 days manufacturer support

Xstream Architecture

Networking

Wireless

SD-WAN

VPN and reporting

Sophos Base License Box

Base license

Xstream Architecture, Networking, Wireless, SD-WAN, VPN and Reporting.

Highly recommended buy for Enhanced Support

There are situations where a Sophos Firewall with the minimum features of the base license is sufficient, and no additional modules are needed. Nevertheless, we recommend in any case the “Enhanced Support License” as an absolute minimum to benefit from unlimited software updates, round-the-clock support by Sophos and a warranty extension of up to 5 years.

Sophos Firewall - Enhanced Support License Box

Enhanced Support

24/7 support, feature updates, advance hardware replacement warranty during the term.

Standard Protection

The Standard Protection includes the following protection modules: 

Sophos Firewall - Network Protection License Box

Network Protection

XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting
Sophos Firewall - Web Protection License Box

Web Protection

XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting
Sophos Firewall - Enhanced Support License Box

Enhanced Support

24/7 support, feature updates, advance hardware replacement warranty during the term.

The link below will take you directly to the Standard Protection product page, and you can learn more about the features it includes.

Sophos Firewall - Standard Protection License Bundle Box

Standard Protection for XGS 87

Network Protection, Web Protection, Enhanced Support

Xstream Protection

The following protection modules are included in Xstream Protection: 

Sophos Firewall - Network Protection License Box

Network Protection

XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting
Sophos Firewall - Web Protection License Box

Web Protection

XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting
Sophos Firewall - Zero-Day Protection License Box

Zero-Day Protection

Machine Learning and Sandboxing File Analysis, reporting
Sophos Firewall - Central Orchestration License Box

Central Orchestration

SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MDR/XDR Connector
Sophos Firewall - Enhanced Support License Box

Enhanced Support

24/7 support, feature updates, advance hardware replacement warranty during the term.

The link below will take you directly to the Xstream Protection product page to learn more about the features it includes.

Sophos Firewall - Xstream Protection License Bundle Box

Xstream Protection for XGS 87

Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Enhanced Support

Epic Protection

The following protection modules are included in Epic Protection: 

Sophos Firewall - Network Protection License Box

Network Protection

XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting
Sophos Firewall - Web Protection License Box

Web Protection

XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting
Sophos Firewall - Zero-Day Protection License Box

Zero-Day Protection

Machine Learning and Sandboxing File Analysis, reporting
Sophos Firewall - Central Orchestration License Box

Central Orchestration

SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MDR/XDR Connector
Sophos Firewall - Email Protection License Box

Email Protection

On-box antispam, AV, DLP, encryption
Sophos Firewall - Web Server Protection License Box

Webserver Protection

Web Application Firewall
Sophos Firewall - Enhanced Support License Box

Enhanced Support

24/7 support, feature updates, advance hardware replacement warranty during the term.

The link below will take you directly to the Epic Protection product page, and you can learn more about the features it includes.

Sophos Firewall - Epic Protection Lizenz Bundle Box

Epic Protection for XGS 87

Network Protection Protection, Web Protection, Zero-Day Protection Protection, Central Orchestration, Email Protection, Web Server Protection, Enhanced Support

Sizing Guide

Which firewall is right for you?

There are several factors to consider when choosing the right firewall model. It is important to make sure which firewall meets your requirement profile and offers sufficient performance and throughput before you buy. To ensure resilience, we would also advise using an HA cluster.

On this product page, we have gathered all the important data about XGS 87 Firewall that will help you make a decision.

Sophos Firewall Sizing Guide Compare 1U Firewalls
Sophos XGS 87(w) Firewall Performance

Avanet Services

Let us improve your safety

Our services are designed to help you keep your Sophos products running securely and reliably. In addition to the classic support for Sophos Firewalls or the Central platform, we offer the following services, which can be requested from us at any time:

Setup Services

Health Check

Upgrades

Workshops

Migrations

Firewall maintenance

SLA

Security audits

Request more information

Setup Services

Want to have your Sophos products set up by professionals? We support you during commissioning and configuration for smooth operation.

Migrations

You would like to change from your SG Firewall (UTM) to a XGS Firewall with the SFOS operating system? Thanks to our experience, we can also manage your changeover without any worries.

Health Check

You have set up your Sophos products yourself and would like us to check the configuration? We will check your settings and give our recommendation.

Workshops

Is it your job to be knowledgeable about Sophos products in your organization? We offer targeted training that is completely tailored to your needs.

EDUCATION & GOVERNMENT

Special awards for educational and government institutions

Sophos offers special discounts for schools and government institutions to meet specific budget requirements. A discount of at least 20 % can be expected.*

Ask us and we will prepare an offer for you completely free of charge and without obligation.

* Special pricing for educational and government institutions is only available in the DACH region.

Request special prices

Trial version

Try Sophos Firewall free

Familiarize yourself with the Sophos Firewall user interface before purchasing. See for yourself how intuitive this advanced operating system is and learn about all the features of Sophos Firewall.

Use the online demo for instant access directly in the browser, without installation. Or download the Sophos Firewall software for free (ISO) and install it on your own hardware.

Online demo Test free of charge

Use the following credentials to start your online demo. Username: demo / Password: XG@dem0user

Accessories

Often bought together

Help with purchase

Are there any questions about the product?

It is better to ask again before buying, before you end up holding the wrong product in your hands.

Ask question
Weight 2,72 kg
Dimensions 49 × 33 × 9 cm
Sophos XGS 87 Appliance
Sophos XGS 87 Appliance

411,75 €