Your branch office is running on a box that was 'good enough' two years ago. Now Teams calls are dropping, the Wi-Fi's flaky, and one bad packet could take the whole site offline. The XGS 136 fixes that without ripping out your existing cabling.
It's a desktop unit. Sits on the shelf next to your patch panel. Fourteen ports straight out of the box: ten GbE copper, two 2.5 GbE with PoE (30 W each), and two SFP slots for FTTP or an optional VDSL modem. Plug in, power up, and Sophos Central handles configuration from a browser tab. No truck roll.
The Xstream dual-processor architecture keeps TLS 1.3 inspection running at 950 Mbps while main firewall traffic pushes 11,500 Mbps. Six-point-four million concurrent connections. Two thousand five hundred IPsec VPN tunnels. Built for a busy office, not a data centre.
SD-WAN orchestration, deep packet inspection, lateral movement protection, and active threat response are all live from first boot. Zero-touch deployment means your IT person – or you – gets it running in minutes, not an afternoon.
One expansion slot if you need extra interfaces down the track. Optional integrated Wi-Fi module for all-in-one connectivity. 64 GB SSD built in. Manage every firewall across your sites from one dashboard.
Add to cart and we'll confirm your dispatch window within one business day
| brand | SOPHOS |
| model | XGS 136 |
| form_factor | Desktop |
| category | NETWORK - SECURITY UTM |
| subcategory | FIREWALLS & NETWORK SECURITY |
| firewall_throughput_mbps | 11500 |
| firewall_imix_mbps | 6500 |
| firewall_latency_64b_udp_us | 8 |
| ips_throughput_mbps | 4000 |
| threat_protection_throughput_mbps | 1000 |
| ngfw_throughput_mbps | 3000 |
| concurrent_connections | 6400000 |
| new_connections_per_sec | 74500 |
| ipsec_vpn_throughput_mbps | 6350 |
| ipsec_vpn_concurrent_tunnels | 2500 |
| ssl_vpn_concurrent_tunnels | 1500 |
| xstream_ssl_tls_inspection_mbps | 950 |
| xstream_ssl_tls_concurrent_connections | 18432 |
| storage | Integrated 64 GB SSD |
| ethernet_interfaces_fixed | 10 x GbE copper, 2 x 2.5 GbE copper, 2 x SFP fiber |
| poe_fixed | 2 x 2.5 GbE (30W max per port) |
| management_ports | 1 x COM RJ45, 1 x Micro-USB (cable included) |
| io_ports | 1 x USB 2.0 (front), 1 x USB 3.0 (rear) |
| expansion_slots | 1 |
| optional_wifi | 1 |
| sfp_ftth_fttp_compatible | 1 |
| vdsl_modem_compatible | 1 |
| management_platform | Sophos Central |
| tls_inspection_version | TLS 1.3 |
| sd_wan_orchestration | 1 |
| zero_touch_deployment | 1 |