We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact silver desktop firewall appliance with nine RJ-45 ports and one SFP cage

Sophos

Sophos XGS 128 XT128Z36ZZPCUS firewall appliance 8 GB LPDDR5 64 GB storage 9 x 2.5GbE 1 SFP

SKU CH-67TB-1MJAE MPN XT128Z36ZZPCUS

Desktop firewall with nine 2.5 GbE ports, one SFP slot, 8 GB LPDDR5, 64 GB storage and 18.65 Gbit/s throughput

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired
  • Wireless TechnologyNone
  • Ports9 x 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5

Model XGS 128

Option 3-Year Standard Protection

  • TLS 1.3 inspection reveals encrypted threats
  • Zero-day protection blocks unknown malware with machine learning
  • FastPath acceleration offloads trusted traffic for higher throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • 5 GbE copper ports plus SFP fiber deliver flexible high-speed connectivity

Sophos XGS 128 desktop firewall

The Sophos XGS 128 is a desktop firewall appliance built around an Intel x86 CPU with 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage. It provides nine 2.5GbE copper ports and one SFP fiber port for wired connectivity in a fanless chassis measuring 320 x 212 x 44 mm and weighing 2.4 kg unpacked. The unit ships with a three-year Standard Protection licence bundle covering base firewall, network protection and web protection.

Suited to small offices needing encrypted-traffic

Organisations that require TLS 1.3 inspection at 1,450 Mbps, zero-day threat protection via machine learning and sandboxing, and SD-WAN orchestration across multiple WAN links will find the feature set aligned. Buyers who need an integrated Xstream Flow Processor, RAID storage redundancy or expansion slots for additional interfaces should look at other models because this appliance has none of those.

1,450 Mbps TLS inspection throughput

The single figure that determines fit is the TLS 1.3 inspection rate of 1,450 Mbps; if your encrypted traffic volume exceeds this ceiling the appliance will become a bottleneck. All other performance numbers such as 19,100 Mbps firewall or 4,000 Mbps threat protection are higher, so encrypted inspection is the limiting factor for sizing.

Highlights

  • TLS 1.3 inspection reveals encrypted threats
  • Zero-day protection blocks unknown malware with machine learning
  • FastPath acceleration offloads trusted traffic for higher throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • 5 GbE copper ports plus SFP fiber deliver flexible high-speed connectivity

Specifications

BrandSophos
SeriesXGS
ModelXGS 128
Part NumberXT128Z36ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired
Wireless TechnologyNone
Ports9 x 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: Intel x86 CPU
Memory: 8 GB LPDDR5
Xstream Flow Processor (NPU): N/A
Memory: N/A
SSD/Storage size: 64 GB UFS 2.1
RAID Support: None
Expansion Slots: None
MTBF (hours): 228,927
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
3.9 kg / 8.60 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

Do I need an SFP transceiver module to use the fiber uplink on this XGS 128?

Yes, the single SFP port requires a compatible transceiver module for fiber connectivity; the copper RJ-45 ports work without additional modules.

Will my existing Cat5e patch cables limit the 2.5GbE ports on this appliance?

Cat5e supports 2.5GbE up to 100 m, so existing cables will work; Cat6 or better is recommended for new runs.

How can I confirm the TLS inspection throughput is near the rated 1 450 Mbps after deployment?

Monitor the real-time throughput dashboard in Sophos Central or the local web admin while TLS traffic passes through the appliance.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.