We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Sophos XGS 128 desktop firewall appliance, white metal chassis, front USB 2.0 port, nine RJ-45 ports, SFP cage, console ports

Sophos

Sophos XGS 128 XT128Z12ZZPCUS firewall appliance 8 GB LPDDR5 64 GB

SKU CH-T6D5-TPBX9 MPN XT128Z12ZZPCUS

Desktop firewall appliance with 9 × 2.5 GbE copper ports, 1 SFP port, 8 GB LPDDR5 memory, 64 GB UFS storage and 19,100 Mbps firewall throughput

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired
  • Wireless TechnologyNone
  • Ports9 x 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5

Model XGS 128

Option 1-Year Standard Protection

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware with machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost performance
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • Fanless desktop design runs silently in noise-sensitive spaces

Desktop firewall for small networks

The Sophos XGS 128 is a fanless desktop appliance with nine 2.5 GbE copper ports, one SFP fibre port and a 64 GB UFS 2.1 store. It ships new with a 1 year Standard Protection licence bundle. An Intel x86 CPU and 8 GB LPDDR5 memory drive the forwarding plane.

Silent operation and low power

With no moving parts the unit runs silently, suited to noise-sensitive offices. The redesigned architecture cuts power draw by roughly 50 % compared with earlier desktop models. Mean time between failures is rated at 228 927 hours. Dimensions are 320 x 212 x 44 mm and unpacked weight is 2.4 kg.

Licence bundle and management extras

Standard Protection includes base firewall, network protection and web protection plus central orchestration for multi-site SD-WAN oversight. TLS 1.3 inspection decrypts encrypted streams at 1 450 Mbps while deep packet inspection and IPS run at 4 650 Mbps. Zero-day sandboxing and DNS protection extend coverage without extra hardware.

Highlights

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware with machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost performance
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • Fanless desktop design runs silently in noise-sensitive spaces

Specifications

BrandSophos
SeriesXGS
ModelXGS 128
Part NumberXT128Z12ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired
Wireless TechnologyNone
Ports9 x 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: Intel x86 CPU
Memory: 8 GB LPDDR5
Xstream Flow Processor (NPU): N/A
Memory: N/A
SSD/Storage size: 64 GB UFS 2.1
RAID Support: None
Expansion Slots: None
MTBF (hours): 228,927
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
3.9 kg / 8.60 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

How do I rack-mount the 320 x 212 x 44 mm desktop chassis and which step is often missed?

Use the optional rack-mount brackets; the step often missed is removing the rubber feet before attaching the brackets so the unit sits flush.

Which component will need replacement first and what is its rated lifetime?

The internal SSD is the only field-replaceable part; its MTBF is 228,927 hours.

At what sustained throughput does TLS 1.3 inspection become the bottleneck?

TLS inspection peaks at 1,450 Mbps, so encrypted traffic above that rate will queue first.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.