We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
White rectangular desktop firewall appliance with front LED panel and rear port array

Sophos

Sophos XGS 128w XW128Z00ZZPCUS firewall appliance 9×2.5GE Wi-Fi 6 8GB LPDDR5 64GB UFS

SKU CH-KVDF-0D5DF MPN XW128Z00ZZPCUS

A desktop firewall and Wi-Fi 6 access point with nine 2.5 GbE ports, 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage for small-branch security

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired + Wireless
  • Wireless TechnologyWi-Fi 6/802.11ax
  • Ports9 x 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5

Model XGS 128W

Option Hardware Only

  • TLS 1.3 inspection at 1,450 Mbps for encrypted traffic visibility
  • Zero-day threat protection via machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost performance
  • SD-WAN orchestration simplifies multi-link branch office management
  • Nine 2.5G copper ports plus Wi-Fi 6 wireless connectivity

Desktop firewall with Wi-Fi 6

The Sophos XGS 128w is a desktop security appliance that combines nine 2.5 Gigabit Ethernet ports, one SFP fibre port and integrated Wi-Fi 6 for small offices or branch sites needing wired and wireless protection in one unit. It ships new with an Intel x86 CPU, 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage for logs and signatures.

Silent operation and flexible connectivity

A fanless design keeps noise at 0 dB, making the appliance suitable for open-plan offices or reception areas. Two USB ports (2.0 front, 3.0 rear), a COM RJ45 and a COM Micro-USB with cable provide local management and console access without extra adapters. The 2.5G copper ports remove the need for separate multi-gig switches when connecting Wi-Fi 6 access points or workstations.

Centralised licensing and cloud intelligence

Bundled Xstream Protection licences activate Base, Network, Web, Zero-Day, DNS Protection, Central Orchestration, MDR and third-party threat feeds, plus NDR Essential and Enhanced Support. Cloud-assisted TLS 1.3 inspection, sandboxing and FastPath offloading inspect encrypted traffic and accelerate trusted applications without additional hardware.

No expansion slots or RAID

The chassis has no internal expansion bays and no RAID support, so storage cannot be extended or mirrored beyond the soldered 64 GB UFS. Organisations that require modular NICs, hardware failover or larger local log retention should evaluate rackmount models instead.

Highlights

  • TLS 1.3 inspection at 1,450 Mbps for encrypted traffic visibility
  • Zero-day threat protection via machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost performance
  • SD-WAN orchestration simplifies multi-link branch office management
  • Nine 2.5G copper ports plus Wi-Fi 6 wireless connectivity

Specifications

BrandSophos
SeriesXGS
ModelXGS 128(w)
Part NumberXW128Z00ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired + Wireless
Wireless TechnologyWi-Fi 6/802.11ax
Ports9 x 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: Intel x86 CPU
Memory: 8 GB LPDDR5
Xstream Flow Processor (NPU): N/A
Memory: N/A
SSD/Storage size: 64 GB UFS 2.1
RAID Support: None
Expansion Slots: None
MTBF (hours): 228,927
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
3.9 kg / 8.60 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What is the first throughput limit reached under sustained heavy traffic?

TLS 1.3 inspection caps at 1,450 Mbps, the lowest of the published throughput figures.

How much heat and noise does the fanless desktop chassis produce when running continuously?

The unit is fanless, so it generates no fan noise; heat is dissipated passively through the 320 x 212 x 44 mm metal enclosure.

Which licence bundle must be active for the appliance to enforce security policies?

A Base Licence is required; all feature bundles such as Xstream Protection or Standard Protection include it.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.