We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact desktop firewall appliance in white finish with front USB port and multiple rear network ports

Sophos

Sophos XGS 128w XY128Z36ZZPCUS firewall appliance

SKU CH-EVX1-04C6B MPN XY128Z36ZZPCUS

Desktop firewall appliance with Wi-Fi 6, nine 2.5 Gigabit Ethernet ports, 8 GB LPDDR5 memory and 64 GB storage, delivering 18.65 Gbit/s firewall throughput

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired + Wireless
  • Wireless TechnologyWi-Fi 6/802.11ax
  • Ports9 x 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5

Model XGS 128W

Option 3-Year Xstream Protection

  • Wi-Fi 6 wireless connectivity for modern device density
  • 9 × 2.5 Gigabit Ethernet ports plus SFP fiber for flexible uplinks
  • 19,100 Mbps firewall throughput for high-speed traffic handling
  • 1,450 Mbps TLS 1.3 inspection throughput to decrypt and inspect encrypted sessions
  • Fanless desktop design with 228,927-hour MTBF for silent, reliable operation

Desktop firewall with Wi-Fi 6

The Sophos XGS 128w is a desktop network security appliance combining wired and wireless connectivity in a fanless chassis. It targets small offices and branch locations that need encrypted-traffic visibility and zero-day threat protection without rack mounting. The Intel x86 CPU and 8 GB LPDDR5 memory drive the integrated security engine.

Nine 2.5 GbE ports plus SFP and console access

The front panel provides nine 2.5 Gigabit Ethernet copper ports and one SFP fiber uplink for flexible WAN or LAN topologies. A COM RJ45 port and a COM Micro-USB port with included cable give direct console access, while front USB 2.0 and rear USB 3.0 ports support storage or modem failover. Fanless operation suits noise-sensitive environments.

Three-year Xstream Protection bundle included

The appliance ships with a 36-month Xstream Protection licence covering Base, Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, DNS Protection, MDR and third-party threat feeds, NDR Essential Protection and Enhanced Support. TLS 1.3 inspection, FastPath application acceleration and SD-WAN orchestration are enabled through this bundle.

Highlights

  • Wi-Fi 6 wireless connectivity for modern device density
  • 9 × 2.5 Gigabit Ethernet ports plus SFP fiber for flexible uplinks
  • 19,100 Mbps firewall throughput for high-speed traffic handling
  • 1,450 Mbps TLS 1.3 inspection throughput to decrypt and inspect encrypted sessions
  • Fanless desktop design with 228,927-hour MTBF for silent, reliable operation

Specifications

BrandSophos
SeriesXGS
ModelXGS 128(w)
Part NumberXY128Z36ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired + Wireless
Wireless TechnologyWi-Fi 6/802.11ax
Ports9 x 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: Intel x86 CPU
Memory: 8 GB LPDDR5
Xstream Flow Processor (NPU): N/A
Memory: N/A
SSD/Storage size: 64 GB UFS 2.1
RAID Support: None
Expansion Slots: None
MTBF (hours): 228,927
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
3.9 kg / 8.60 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What throughput does the 2.5GBase-T interface cap at for firewall traffic?

The appliance delivers up to 18.65 Gbit/s firewall throughput across its 2.5 Gigabit Ethernet ports.

What are the desktop dimensions and weight for placement planning?

The unit measures 320 x 212 x 44 mm and weighs 2.4 kg unpacked.

How is the initial setup performed, and which step is often missed?

Connect via the COM RJ45 or Micro-USB console port, then register the device in Sophos Central to activate the 3-year Xstream Protection license.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.