Your org's grown past the mid-range box. You've got more sites, more remote users, more SD-WAN tunnels to keep alive, and your current firewall's throttling IPS and VPN throughput when it matters most. The XGS 3100 clears 47 Gbps of firewall throughput, 10.5 Gbps of IPS, and 25 Gbps of IPsec VPN – all at a 4 µs latency floor.
Where it separates from the 2100/2300 series: two SFP+ 10 GigE fibre ports built in, and max port density up to 20 with Flexi Port modules. If you're aggregating multiple WAN links or feeding a 10G backbone, those SFP+ slots save you a switch hop.
1U rackmount. Xstream Flow processor handles the packet processing in hardware. Optional external power supply for redundancy.
Before you commit: HWaaS 12-month subscription, MSP Flex licensing is required, and it drop-ships directly from Sophos to your site. AU power cord's included.
Add to cart when the 10G uplink and IPS headroom match your build
| brand | Sophos |
| model | XGS 3100 |
| form_factor | 1U rackmount |
| firewall_throughput_mbps | 47000 |
| tls_inspection_mbps | 2470 |
| ips_mbps | 10500 |
| ipsec_vpn_mbps | 25000 |
| ngfw_mbps | 9000 |
| threat_protection_mbps | 7400 |
| latency_64byte_udp_us | 4 |
| fixed_ethernet_ports | 8x GE copper, 2x SFP fibre, 2x SFP+ 10GE fibre |
| max_port_density | 20 |
| flexi_port_slots | 1 |
| management_interfaces | 1x RJ45 MGMT, 1x COM RJ45, 1x COM Micro-USB |
| usb_ports | 2x USB 3.0 front, 1x USB 2.0 rear |
| poe_support | 1 Flexi Port module: 4 ports, 60W max |
| redundant_power | Optional external second power supply |
| power_cord | AU |
| licensing_model | HWaaS 12-month commit |
| licensing_requirement | MSP Flex |
| shipping | Drop ship from Sophos |
| category | Network Security UTM – Firewalls & Network Security |
