We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact grey desktop firewall appliance with front RJ-45 ports and USB 2.0

Sophos

Sophos XGS 138 XT138Z36ZZPCUS firewall appliance 8 GB DDR4 64 GB M.2

SKU CH-VHMH-4N4ST MPN XT138Z36ZZPCUS

A desktop firewall appliance with 8 GB DDR4 memory, 64 GB M.2 storage, four GE copper ports, two 2.5 GE copper ports, two SFP+ fiber ports, and 18.65 Gbit/s firewall throughput

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired
  • Wireless TechnologyNone
  • Ports4 x GE copper 2 x 2.5GE copper 2 x SFP+ fiber 1 x COM RJ45 1
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: AMD x86 CPU Memory: 8 GB DDR4 Xstr

Model XGS 138

Option 3-Year Standard Protection

  • TLS 1.3 inspection reveals threats hidden inside encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • 19,100 Mbps firewall throughput handles heavy network loads

Purpose-built desktop firewall

The Sophos XGS 138 is a desktop security appliance for small offices and branch sites that need encrypted traffic inspection and threat protection without a rack. It combines an AMD x86 CPU with 8 GB DDR4 system memory and a Marvell NPU with 4 GB DDR4 to accelerate TLS 1.3 inspection, IPS and sandboxing. Local logging and reporting are stored on a 64 GB M.2 drive and the bundle includes three years of Standard Protection licensing.

Fanless thermal design

With no moving parts the unit runs silently, making it suitable for open-plan offices or reception areas where noise must stay low. The chassis measures 320 x 212 x 44 mm and weighs 2.4 kg unpacked, so it sits on a shelf or desk without special mounting. Power consumption is approximately half that of the previous desktop generation, reducing both operating cost and heat output in confined spaces.

Copper and fibre connectivity

Six Ethernet ports provide flexible WAN and LAN options: four 1 GbE RJ-45, two 2.5 GbE RJ-45 and two 10 GbE SFP+ cages for fibre uplinks. A front USB 2.0 port, a rear USB 3.0 port, a COM RJ-45 console and a micro-USB console cable give multiple management paths. No expansion slots are present, so the port count is fixed for the life of the appliance.

Highlights

  • TLS 1.3 inspection reveals threats hidden inside encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • 19,100 Mbps firewall throughput handles heavy network loads

Specifications

BrandSophos
SeriesXGS
ModelXGS 138
Part NumberXT138Z36ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired
Wireless TechnologyNone
Ports4 x GE copper
2 x 2.5GE copper
2 x SFP+ fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: AMD x86 CPU
Memory: 8 GB DDR4
Xstream Flow Processor (NPU): Marvell NPU
Memory: 4 GB DDR4
SSD/Storage size: 64 GB M.2
RAID Support: None
Expansion Slots: None
MTBF (hours): 200,091
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
4.4 kg / 9.70 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

How do I install the Sophos XGS 138 in a rack when the unit ships as a desktop form factor?

The appliance is a desktop model measuring 320 x 212 x 44 mm and weighing 2.4 kg; no rack-mount brackets are included, so it sits on a shelf or flat surface. If you later need rack mounting, purchase a compatible third-party shelf that supports the depth and weight.

Which component will need replacement first under continuous operation?

The built-in 64 GB M.2 storage is not user-replaceable and has no RAID redundancy; plan for appliance replacement when the drive reaches end of life. The fanless design eliminates fan wear, and the MTBF is rated at 200,091 hours.

At what sustained throughput does TLS 1.3 inspection become the bottleneck?

TLS 1.3 inspection throughput is rated at 1,700 Mbps, which is lower than the 4,750 Mbps threat protection or 5,850 Mbps IPS rates, so encrypted traffic inspection will hit its limit first during sustained encrypted workloads.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.