Your network's been crawling since that last firmware update, and the old box can't keep up with the 10Gb fiber your ISP just dropped off. You need throughput that doesn't bottleneck between the firewall, the switch, and the Wi-Fi 6 APs on every floor.
The XGS 138 is Sophos' desktop gateway for the distributed edge. Dedicated Xstream Flow processor handles hardware acceleration so your 19.1Gbps firewall throughput actually holds under load. Two 10Gb SFP+ ports give you clean fiber uplinks. Two 2.5GbE PoE ports (802.3at, 30W max each) let traffic flow straight to a 2.5GbE switch or an access point without a single choke point.
IPsec VPN hits 6.6Gbps. Threat protection runs at 4.75Gbps. IPS at 5.85Gbps. No guessing, no 'it depends on the workload' — these are the numbers on the box.
One expansion slot takes an optional Gen-2 5G module or SFP transceivers if you need to grow later. Optional second power supply keeps it running when one feed drops. Management over COM RJ45 or Micro-USB. USB 2.0 front, USB 3.0 rear for logs and config pulls.
One unit on the shelf here. Add to cart and we'll have it in your hands before your next Monday stand-up
| brand | Sophos |
| model | XGS 138 |
| form_factor | Desktop |
| firewall_throughput_mbps | 19100 |
| tls_inspection_mbps | 1700 |
| firewall_imix_mbps | 10500 |
| ips_mbps | 5850 |
| ipsec_vpn_mbps | 6600 |
| ngfw_mbps | 5100 |
| threat_protection_mbps | 4750 |
| ethernet_copper_ports | 4x GbE |
| poe_ports | 2x 2.5GbE (802.3at, 30W max per port) |
| sfp_plus_ports | 2x 10Gb |
| management_interfaces | 1x COM RJ45, 1x COM Micro-USB |
| usb_ports | 1x USB 2.0 (front), 1x USB 3.0 (rear) |
| expansion_slots | 1 |
| optional_modules | Gen-2 5G module, SFP transceivers |
| redundancy | Optional 2nd power supply |
| hardware_acceleration | Dedicated Xstream Flow processor |
| category | Network Security UTM |
| subcategory | Firewalls & Network Security |
| rrp_aud | 2294 |
| stock_qty | 1 |
