We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact silver desktop firewall appliance with front ports and ventilation slots

Sophos

Sophos XGS 138 XT138Z12ZZPCUS firewall appliance 8 GB DDR4 64 GB

SKU CH-CVA8-JDBSF MPN XT138Z12ZZPCUS

Desktop firewall appliance with 8 GB DDR4 memory, 64 GB storage, four 2.5 GbE copper ports, two SFP+ fiber ports and 18.65 Gbit/s firewall throughput

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired
  • Wireless TechnologyNone
  • Ports4 x GE copper 2 x 2.5GE copper 2 x SFP+ fiber 1 x COM RJ45 1
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: AMD x86 CPU Memory: 8 GB DDR4 Xstr

Model XGS 138

Option 1-Year Standard Protection

  • TLS 1.3 inspection reveals hidden threats in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • 19,100 Mbps firewall throughput handles heavy network loads
  • Fanless desktop design runs silently in noise-sensitive spaces

XGS 138 desktop firewall appliance

The Sophos XGS 138 is a desktop network security appliance built for small to mid-sized businesses that need encrypted traffic inspection and threat protection without rack infrastructure. It ships with 8 GB DDR4 system memory, a 64 GB M.2 SSD and an AMD x86 CPU paired with a Marvell Xstream Flow Processor for hardware-accelerated scanning.

2.5G copper and 10G fiber port limits

Six wired interfaces provide 4 x 1 GbE RJ-45, 2 x 2.5 GbE RJ-45 and 2 x SFP+ slots for 10 GbE fiber uplinks. Firewall throughput reaches 19,100 Mbps while TLS 1.3 inspection sustains 1,700 Mbps, so encrypted traffic analysis becomes the practical bottleneck before the physical ports saturate.

Fanless desktop installation notes

The fanless 320 x 212 x 44 mm chassis weighs 2.4 kg and operates silently on a desktop or shelf. No expansion slots exist, so storage and memory are fixed at 64 GB and 8 GB DDR4 respectively. A front USB 2.0 and rear USB 3.0 port aid initial setup, while the included micro-USB console cable covers serial access.

Highlights

  • TLS 1.3 inspection reveals hidden threats in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • 19,100 Mbps firewall throughput handles heavy network loads
  • Fanless desktop design runs silently in noise-sensitive spaces

Specifications

BrandSophos
SeriesXGS
ModelXGS 138
Part NumberXT138Z12ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired
Wireless TechnologyNone
Ports4 x GE copper
2 x 2.5GE copper
2 x SFP+ fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: AMD x86 CPU
Memory: 8 GB DDR4
Xstream Flow Processor (NPU): Marvell NPU
Memory: 4 GB DDR4
SSD/Storage size: 64 GB M.2
RAID Support: None
Expansion Slots: None
MTBF (hours): 200,091
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
4.4 kg / 9.70 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

Which port combination on the XGS 138 suits a small office needing both copper and fibre uplinks?

The appliance provides four 1 GbE copper ports, two 2.5 GbE copper ports and two SFP+ fibre ports, so copper workstations and fibre uplinks connect without extra modules.

What does the 1,700 Mbps TLS inspection figure mean for daily HTTPS traffic?

It is the maximum sustained throughput when decrypting and inspecting TLS 1.3 traffic; real-world HTTPS loads above that rate will bypass inspection or queue.

How do the SFP+ ports and 2.5 GbE copper ports limit WAN speed in practice?

SFP+ ports accept 10 GbE transceivers while the 2.5 GbE copper ports cap at 2.5 Gbps, so the fastest WAN link is determined by which port type the ISP handoff uses.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.