We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Sophos XGS 138 desktop firewall, black metal case, front ports visible

Sophos

Sophos XGS 138 firewall appliance XX138Z36ZZPCUS 8 GB DDR4 64 GB

SKU CH-JSH3-DX2EQ MPN XX138Z36ZZPCUS

Desktop firewall appliance with 8 GB DDR4, 64 GB storage and 18.65 Gbit/s throughput

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired
  • Wireless TechnologyNone
  • Ports4 x GE copper 2 x 2.5GE copper 2 x SFP+ fiber 1 x COM RJ45 1
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: AMD x86 CPU Memory: 8 GB DDR4 Xstr

Model XGS 138

Option 3-Year Xstream Protection

  • Firewall throughput reaches 19,100 Mbps for high-speed traffic handling
  • TLS inspection processes 1,700 Mbps of encrypted sessions
  • Zero-day protection uses machine learning and sandboxing
  • Desktop form factor measures 320 x 212 x 44 mm fanless
  • Eight ports include 2.5G copper, SFP+ fiber and USB 3.0

Purpose-built desktop security appliance

The Sophos XGS 138 is a desktop firewall appliance designed for small offices and branch locations that need encrypted-traffic visibility without rack mounting. It ships with a three-year Xstream Protection licence bundle covering network, web, zero-day, DNS and NDR essential protection. An AMD x86 CPU and a dedicated Marvell NPU offload inspection tasks from the main cores. The fanless chassis suits noise-sensitive environments such as reception areas or open-plan workspaces.

64 GB M.2 storage and 8 GB DDR4 system memory

The 64 GB M.2 drive holds firmware, logs and threat-intelligence caches while the 8 GB DDR4 system memory runs the management plane and security engines. Firewall throughput reaches 19,100 Mbps and IMIX throughput 10,500 Mbps, but TLS 1.3 inspection tops out at 1,700 Mbps, so heavy encrypted-traffic loads will become the bottleneck before raw packet forwarding does. IPS throughput is 5,850 Mbps and NGFW throughput 5,100 Mbps, giving headroom for typical branch traffic mixes. IPsec VPN capacity sits at 6,600 Mbps for site-to-site tunnels.

Fanless desktop chassis with 2.5G and 10G uplinks

The 320 x 212 x 44 mm fanless enclosure weighs 2.4 kg and operates silently on a desktop or shelf. Connectivity includes four 1 GbE RJ-45 ports, two 2.5 GbE RJ-45 ports and two 10 GbE SFP+ cages for fibre uplinks. A front USB 2.0 port, rear USB 3.0 port, RJ-45 console and micro-USB console cable are provided for local management. No expansion slots or RAID support are present, so storage and interface count are fixed at purchase.

Highlights

  • Firewall throughput reaches 19,100 Mbps for high-speed traffic handling
  • TLS inspection processes 1,700 Mbps of encrypted sessions
  • Zero-day protection uses machine learning and sandboxing
  • Desktop form factor measures 320 x 212 x 44 mm fanless
  • Eight ports include 2.5G copper, SFP+ fiber and USB 3.0

Specifications

BrandSophos
SeriesXGS
ModelXGS 138
Part NumberXX138Z36ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired
Wireless TechnologyNone
Ports4 x GE copper
2 x 2.5GE copper
2 x SFP+ fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: AMD x86 CPU
Memory: 8 GB DDR4
Xstream Flow Processor (NPU): Marvell NPU
Memory: 4 GB DDR4
SSD/Storage size: 64 GB M.2
RAID Support: None
Expansion Slots: None
MTBF (hours): 200,091
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
4.4 kg / 9.70 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

Will the 2.5GBase-T ports negotiate down to 1 Gbps for my existing switches?

Yes, the two 2.5 Gigabit Ethernet copper ports auto-negotiate to 1000Base-T so current 1 Gbps switches connect at line rate.

Which front-panel indicator confirms the Xstream Flow Processor is processing traffic?

The NPU activity LED lights solid green when the Marvell NPU is actively offloading flows.

Does the box include a console cable for the RJ-45 COM port?

A USB 2.0 to Micro-USB console cable is included; an RJ-45 to DB-9 serial cable must be purchased separately.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.