| CPU (Core/Threads) | x86 AMD CPU | x86 AMD CPU | x86 AMD CPU | x86 AMD CPU | x86 AMD CPU |
| CPU (Memory) | 4 GB DDR4 | 4 GB DDR4 | 4 GB DDR4 | 6 GB DDR4 | 8 GB DDR4 |
| NPU (Core/Threads) | Marvell NPU | Marvell NPU | Marvell NPU | Marvell NPU | Marvell NPU |
| NPU (Memory) | 2 GB DDR4 | 2 GB DDR4 | 4 GB DDR4 | 4 GB DDR4 | 4 GB DDR4 |
| Firewall Throughput | 3 700 MBit/s | 7 000 MBit/s | 7 700 MBit/s | 10 500 MBit/s | 11 500 MBit/s |
| Firewall IMIX | 2 500 MBit/s | 2 900 MBit/s | 3 500 MBit/s | 4 000 MBit/s | 4 700 MBit/s |
| Latency (64 byte UDP) | 6 µs | 6 µs | 8 μs | 8 μs | 8 μs |
| IPS Throughput | 1 015 MBit/s | 1 355 MBit/s | 2 000 MBit/s | 2 600 MBit/s | 3 300 MBit/s |
| Throughput Threat Protection | 240 MBit/s | 330 MBit/s | 685 MBit/s | 900 MBit/s | 1 000 MBit/s |
| Simultaneous connections | 1 600'000 | 1 600'000 | 1 600'000 | 5 000 000 | 6 400 000 |
| New connections/sec | 35 700 | 44 400 | 61 500 | 69 900 | 74 500 |
| IPsec VPN throughput | 750 MBit/s | 900 MBit/s | 1100 MBit/s | 1800 MBit/s | 2500 MBit/s |
| Xstream SSL/TLS Inspection | 375 MBit/s | 420 MBit/s | 650 MBit/s | 800 MBit/s | 950 MBit/s |
| Concurrent connections XStream SSL/TLS | 8192 | 8192 | 8192 | 12288 | 18 432 |
| Storage (local quarantine/logs) | 16 GB eMMC | Integrated 64 GB SSD | Integrated 64 GB SSD | Integrated 64 GB SSD | Integrated 64 GB SSD |
| Ethernet interfaces (fixed) | 4 GbE copper, 1 x SFP fiber optic | 8 GbE copper, 1 x SFP fiber optic | 8 GbE copper 1 GbE SFP | 12 GbE copper, 2 x SFP fiber optics | 10 GbE copper, 2-port 2.5 GbE copper, 2 x SFP fiber |
| Power over Ethernet (min.) | - | - | 1 x GbE 803.2at (max. 30 W) | 2 x GbE (max. 30 W per port) | 2 x 2.5 GbE (max. 30 W per port) |
| Administrative ports | 1 x COM (RJ45), 1 x Micro-USB (cable incl.) | 1 x COM (RJ45), 1 x Micro-USB (cable incl.) | 1 x COM (RJ45), 1 x Micro-USB (cable incl.) | 1 x COM (RJ45), 1 x Micro-USB (cable incl.) | 1 x COM (RJ45), 1 x Micro-USB (cable incl.) |
| Other I/O ports | 1 x USB 2.0 (front), 1 x USB 3.0 (rear) | 1 x USB 2.0 (front), 1 x USB 3.0 (rear) | 1 x USB 2.0 (front), 1 x USB 3.0 (rear) | 1 x USB 2.0 (front), 1 x USB 3.0 (rear) | 1 x USB 2.0 (front), 1 x USB 3.0 (rear) |
| Number of expansion slots | - | - | 1 | 1 | 1 |
| Connection modules (optional) | SFP DSL module (VDSL2), SFP transceiver | SFP DSL module (VDSL2), SFP transceiver | SFP DSL module (VDSL2), 3G/4G module, SFP transceiver | SFP DSL module (VDSL2), 3G/4G module, SFP transceiver | SFP DSL module (VDSL2), 3G/4G module, SFP transceiver |
| Assembly | Rack mount kit available (must be ordered separately) | Rack mount kit available (must be ordered separately) | Rack mount kit available (must be ordered separately) | Rack mount kit available (must be ordered separately) | Rack mount kit available (must be ordered separately) |
| Dimensions width x depth x height | 230 x 44 x 205.5 mm | 230 x 44 x 205.5 mm | 320 x 44 x 213 mm | 320 x 44 x 213 mm | 320 x 44 x 213 mm |
| Weight | 1.36 kg (without packing) 2.75 kg (with packing) | 1.4 kg (without packing), 2.8 kg (with packing) | 2.2 kg (without packaging) 4.2 kg (with packaging) | 2.4 kg (without packaging) 4.4 kg (with packaging) | 2.4 kg (without packaging) 4.4 kg (with packaging) |
| Power supply | External, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W | External, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W Optional second redundant power supply Power supply | External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply | External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply | External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply |
| Power consumption | 23.2 W/79.16 BTU/h (87) (idle) 43.4 W/148.09 BTU/h (full load) | 26.1 W/89.06 BTU/h (idle), 53.9 W/183.91 BTU/h (full load) | 28 W, 96 BTU/h (idle), 57 W/195 BTU/h (full load) | 30 W/102 BTU/h (idle), 59 W/202 BTU/h (full load) | 30 W/102 BTU/h (idle), 62 W/212 BTU/h (full load) |
| Incl. Use of PoE | - | - | 38 W/130 BTU/h (full load) | 76 W/260 BTU/hr (max.) | 76 W/260 BTU/hr (max.) |
| Operating temperature | 0 °C to 40 °C (operation), -20 to +70 °C (storage) | 0 °C to 40 °C (operation), -20 to +70 °C (storage) | 0 °C to 40 °C (operation), -20 to +70 °C (storage) | 0 °C to 40 °C (operation), -20 to +70 °C (storage) | 0 °C to 40 °C (operation), -20 to +70 °C (storage) |
| Humidity | 10% to 90%, non-condensing | 10% to 90%, non-condensing | 10% to 90%, non-condensing | 10% to 90%, non-condensing | 10% to 90%, non-condensing |
Sophos XGS 87 Appliance
587,98 €
47
99
When will I receive it?
Free
Free shipping to the European Economic Area (EEA), Switzerland and Liechtenstein for all orders over 200 CHF.
Delivery
Free shipping over 200 €1-2 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
2-6 Workdays
47in stock
99in stock
99in stock
99in stock
99in stock
99in stock
99in stock
99in stock
99in stock
Description
Learn more about the
Sophos XGS 87 Appliance
The XGS 87 is not able to support advanced features such as on-box reporting, dual scan engine scanning, WAF antivirus scanning, and message transfer agent (MTA) functionality. If you depend on these capabilities, we advise the XGS 107(w) or larger.
The XGS 87 belongs to the desktop variant of the XGS series. It has SFP for fiber connections and an integrated Ethernet interface. The devices in this range are perfect for small offices, small branch offices and retail stores.
The entire XGS series offers increased efficiency and performance. With the dedicated Xstream processor, data recognition is increased. In addition, the built-in and additional connection options facilitate subsequent adjustments to the infrastructure. The XGS 87 is equipped with TLS Inspection, Deep Packet Inspection and Application Acceleration to give you a powerful “See it. Stop it. Secure it” protection.
Scope of delivery
What is included in the scope of delivery?
Hardware
Sophos XGS 87 Firewall
Documents
Quick guide
Safety instructions
Accessories
Power supply
Micro USB cable
RJ45 Ethernet cable
Power cable
Technical specifications
Sophos XGS 87 Series
The Sophos XGS 87 is particularly suitable for small offices, small branch offices and retail stores.
Connections and extensions
Front
Back
Dimensions and weight
HEIGHT
4.4 cm
WIDTH
23.0 cm
DEEP
20.55 cm
WEIGHT
1.36 kg/3 lbs (unpacked)
2.75 kg/6.06 lbs (packed)
Manufacturer warranty and service
1 year warranty
With the purchase of this Sophos Firewall you get 1 year warranty as standard. The term "Warranty" means Avanet's warranty and Sophos's manufacturer 's warranty. With an active Enhanced Support license, the warranty period can be extended up to 5 years.
3 SFOS updates included
When purchasing Sophos Firewall without a license bundle, three SFOS firmware updates are included. To keep your Sophos Firewall up to date, an active Enhanced Support license is required. This can either be purchased separately with the firewall, or you can purchase the Sophos Firewall together with a license bundle that includes Enhanced Support.
90 days manufacturer support
If Sophos Firewall is purchased without Enhanced Support or a license bundle, vendor support is limited to 90 days.
Included functions
Basic license
The base license is included free with every Sophos Firewall and includes Xstream architecture, networking, wireless, SD-WAN, VPN and reporting. Read our detailed knowledge base article about the base license to find out if the free features are enough for you.
Central Management
Link your firewall to Central, Sophos' advanced cloud-based platform. Enjoy convenient features like fast alerts, backup management, one-click firmware updates, and smooth deployment of new firewalls. Dive into the exciting world of Sophos Central and experience efficient management of your security solutions!
Central Reporting
Enjoy free Central Reporting with up to 7 days of report data storage. You get access to robust reporting tools that let you visually map your network, Internet, and application activity and security over time.
Performance
FIREWALL
3,850 Mbps
TLS INSPECTION
375 Mbps
FIREWALL IMIX
3,000 Mbps
IPS
1,200 Mbps
IPSEC VPN
3,000 Mbps
NGFW
700 Mbps
THREAT
PROTECTION
280 Mbps
LATENCY
(64 BYTE UDP)
6 µs
CONCURRENT CONNECTIONS
1.600.000
NEW CONNECTIONS/SEC
35.700
CONCURRENT
IPSEC-VPN-TUNNELS
500
CONCURRENT
SSL VPN TUNNEL
500
XSTREAM SSL/TLS INSPECTION
375 MBit/s
CONCURRENT CONNECTIONS
XSTREAM SSL/TLS
8.192
Connectivity
STORAGE
16 GB eMMC
ETHERNET INTERFACES (FIXED)
4 x GbE copper
1 x SFP fiber
POWER-OVER ETHERNET (FIXED)
-
MANAGEMENT INTERFACES
1 x COM RJ45
1 x Micro-USB (cable incl.)
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Modularity
OPTIONAL ADD-ON MODULES
SFP DSL module (VDSL2)
SFP transceiver
Operating conditions
POWER SUPPLY
External, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W
POWER CONSUMPTION
23.2 W / 79.16 BTU/hr (idle)
43.4 W / 148.09 BTU/hr (max.)
OPERATING TEMPERATURE
0°C to 40°C (operating)
-20°C to +70°C (storage)
HUMIDITY
10% to 90%, non-condensing
Product Certifications
CERTIFICATIONS
CB, CE, UKCA, UL, FCC, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel, TEC
Licensing
Extend the range of functionality of the XGS 87
To increase the protection capabilities, you can also purchase the Sophos Firewall together with a license package. The following options are available:
Included free of charge
Base license
1 year warranty, 3 SFOS updates included, 90 Days manufacturer support with free base license.
Extend range of features
Standard Protection
Network Protection, Web Protection, Enhanced Support
Xstream Protection
Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Enhanced Support
Epic Protection
Network Protection Protection, Web Protection, Zero-Day Protection Protection, Central Orchestration, Email Protection, Web Server Protection, Enhanced Support
Base license
Each Sophos XGS Firewall Appliance purchased individually includes the free base license, which provides basic security features:
1 year warranty
3 SFOS updates included
90 days manufacturer support
Xstream Architecture
Networking
Wireless
SD-WAN
VPN and reporting
Base license
Xstream Architecture, Networking, Wireless, SD-WAN, VPN and Reporting.
Highly recommended buy for Enhanced Support
There are situations where a Sophos Firewall with the minimum features of the base license is sufficient, and no additional modules are needed. Nevertheless, we recommend in any case the “Enhanced Support License” as an absolute minimum to benefit from unlimited software updates, round-the-clock support by Sophos and a warranty extension of up to 5 years.
Enhanced Support
24/7 support, feature updates, advance hardware replacement warranty during the term.
Standard Protection
The Standard Protection includes the following protection modules:
Network Protection
XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting
Web Protection
XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting
Enhanced Support
24/7 support, feature updates, advance hardware replacement warranty during the term.
The link below will take you directly to the Standard Protection product page, and you can learn more about the features it includes.
Standard Protection for XGS 87
Network Protection, Web Protection, Enhanced Support
Xstream Protection
The following protection modules are included in Xstream Protection:
Network Protection
XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting
Web Protection
XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting
Zero-Day Protection
Machine Learning and Sandboxing File Analysis, reporting
Central Orchestration
SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MDR/XDR Connector
Enhanced Support
24/7 support, feature updates, advance hardware replacement warranty during the term.
The link below will take you directly to the Xstream Protection product page to learn more about the features it includes.
Xstream Protection for XGS 87
Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Enhanced Support
Epic Protection
The following protection modules are included in Epic Protection:
Network Protection
XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting
Web Protection
XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting
Zero-Day Protection
Machine Learning and Sandboxing File Analysis, reporting
Central Orchestration
SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MDR/XDR Connector
Email Protection
On-box antispam, AV, DLP, encryption
Webserver Protection
Web Application Firewall
Enhanced Support
24/7 support, feature updates, advance hardware replacement warranty during the term.
The link below will take you directly to the Epic Protection product page, and you can learn more about the features it includes.
Epic Protection for XGS 87
Network Protection Protection, Web Protection, Zero-Day Protection Protection, Central Orchestration, Email Protection, Web Server Protection, Enhanced Support
Sizing Guide
Which firewall is right for you?
There are several factors to consider when choosing the right firewall model. It is important to make sure which firewall meets your requirement profile and offers sufficient performance and throughput before you buy. To ensure resilience, we would also advise using an HA cluster.
On this product page, we have gathered all the important data about XGS 87 Firewall that will help you make a decision.
Avanet Services
Let us improve your safety
Our services are designed to help you keep your Sophos products running securely and reliably. In addition to the classic support for Sophos Firewalls or the Central platform, we offer the following services, which can be requested from us at any time:
Setup Services
Health Check
Upgrades
Workshops
Migrations
Firewall maintenance
SLA
Security audits
Request more informationSetup Services
Want to have your Sophos products set up by professionals? We support you during commissioning and configuration for smooth operation.
Migrations
You would like to change from your SG Firewall (UTM) to a XGS Firewall with the SFOS operating system? Thanks to our experience, we can also manage your changeover without any worries.
Health Check
You have set up your Sophos products yourself and would like us to check the configuration? We will check your settings and give our recommendation.
Workshops
Is it your job to be knowledgeable about Sophos products in your organization? We offer targeted training that is completely tailored to your needs.
Resources
Deepen your knowledge and learn more about the “Sophos XGS Firewall”
Sophos XGS Firewall – Datasheet
Sophos XGS Firewall – Brochure
Sophos Firewall – Solution Brief
Sophos Central Firewall – Datasheet
Next-Gen Firewall – Buyer's Guide
Cybersecurity System – Buyer's Guide
Sophos Central Firewall Reporting – Datasheet
Sophos Firewall and SD-WAN whitepaper
EDUCATION & GOVERNMENT
Special awards for educational and government institutions
Sophos offers special discounts for schools and government institutions to meet specific budget requirements. A discount of at least 20 % can be expected.*
Ask us and we will prepare an offer for you completely free of charge and without obligation.
* Special pricing for educational and government institutions is only available in the DACH region.
Request special pricesTrial version
Try Sophos Firewall free
Familiarize yourself with the Sophos Firewall user interface before purchasing. See for yourself how intuitive this advanced operating system is and learn about all the features of Sophos Firewall.
Use the online demo for instant access directly in the browser, without installation. Or download the Sophos Firewall software for free (ISO) and install it on your own hardware.
Use the following credentials to start your online demo. Username: demo / Password: XG@dem0user
Accessories
Often bought together
-
Sophos Standard Protection for XGS 87161,88 € - 1.011,75 €incl. VAT
-
Sophos XGS 87 Enhanced Support64,51 € - 250,50 €
incl. VAT
-
Sophos Rackmount kit with adapter bracket for XGS 87(w)/107(w)122,36 €
incl. 19% VAT
-
Sophos Power Supply for XGS 87(w)/107(w)63,67 €
incl. 19% VAT
Help with purchase
Are there any questions about the product?
It is better to ask again before buying, before you end up holding the wrong product in your hands.
Ask question