We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact silver desktop firewall appliance with nine RJ-45 ports on the front

Sophos

Sophos XGS 128 XX128Z36ZZPCUS firewall appliance 8 GB LPDDR5 64 GB UFS 2.1 9 port 2.5GBase-T

SKU CH-C1E4-CH3S8 MPN XX128Z36ZZPCUS

Desktop firewall appliance with nine 2.5 Gigabit Ethernet ports, 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage, delivering 19,100 Mbps firewall throughput and TLS 1.3 inspection

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired
  • Wireless TechnologyNone
  • Ports9 x 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5

Model XGS 128

Option 3-Year Xstream Protection

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • 5 GbE copper ports deliver high-speed wired connectivity

Desktop firewall appliance for small networks

The Sophos XGS 128 is a desktop-form-factor security appliance designed for small offices or branch locations that need encrypted-traffic visibility without rack mounting. It ships new with 8 GB of LPDDR5 memory and 64 GB of UFS 2.1 storage, and it operates silently because the chassis is fanless. The included three-year Xstream Protection bundle activates the full inspection suite on day one.

2.5GBase-T copper ports set the connectivity

Nine RJ-45 interfaces run at 2.5 Gigabit Ethernet, providing the primary LAN and WAN links for the appliance. A single SFP cage is also present for fibre uplinks, but the copper port count and speed are the fixed parameters that determine whether the unit fits a given network layout. No expansion slots exist to add more interfaces later.

Bundled licence stack enables inspection

The three-year Xstream Protection licence unlocks TLS 1.3 decryption at 1,450 Mbps, threat protection at 4,000 Mbps, IPS at 4,650 Mbps and NGFW throughput at 4,350 Mbps. It also activates SD-WAN orchestration, DNS protection, zero-day sandboxing and NDR essentials, turning the hardware into a managed security node without extra subscriptions.

Highlights

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • 5 GbE copper ports deliver high-speed wired connectivity

Specifications

BrandSophos
SeriesXGS
ModelXGS 128
Part NumberXX128Z36ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired
Wireless TechnologyNone
Ports9 x 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: Intel x86 CPU
Memory: 8 GB LPDDR5
Xstream Flow Processor (NPU): N/A
Memory: N/A
SSD/Storage size: 64 GB UFS 2.1
RAID Support: None
Expansion Slots: None
MTBF (hours): 228,927
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
3.9 kg / 8.60 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What does the 18.65 Gbit/s firewall throughput mean when the appliance is in production?

It represents the maximum firewall inspection rate under ideal test conditions; real-world throughput will be lower once traffic mixes, logging, and security policies are applied.

How does the 2.5GBase-T interface limit actual network speed?

Each copper port caps at 2.5 Gbps full-duplex, so any link negotiated at 1 Gbps or 100 Mbps will run at that lower rate instead.

What physical space and mounting does the desktop chassis require?

The unit measures 320 x 212 x 44 mm and weighs 2.4 kg, designed for flat desktop placement with no rack ears included.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.