We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Sophos XGS 138 desktop firewall appliance, matte black metal case with front port array

Sophos

Sophos XGS 138 XX138Z12ZZPCUS firewall appliance

SKU CH-GJMZ-X33FP MPN XX138Z12ZZPCUS

Desktop firewall appliance with 4×GE, 2×2.5GE and 2×SFP+ ports, 19,100 Mbps firewall throughput and 1,700 Mbps TLS inspection, bundled with one year Xstream Protection licensing

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired
  • Wireless TechnologyNone
  • Ports4 x GE copper 2 x 2.5GE copper 2 x SFP+ fiber 1 x COM RJ45 1
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: AMD x86 CPU Memory: 8 GB DDR4 Xstr

Model XGS 138

Option 1-Year Xstream Protection

  • TLS 1.3 inspection reveals hidden threats in encrypted traffic
  • Zero-day protection blocks unknown malware with machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • Desktop fanless design runs silently in noise-sensitive spaces

Purpose and audience

The Sophos XGS 138 is a desktop firewall appliance with 8 GB DDR4 system memory, 4 GB DDR4 NPU memory and a 64 GB M.2 SSD. It delivers 19,100 Mbps firewall throughput and 1,700 Mbps TLS 1.3 inspection for small to mid-size sites that need encrypted-traffic visibility and zero-day sandboxing.

Pre-installation checks

Verify that your rack or bench can accommodate a 320 x 212 x 44 mm fanless chassis weighing 2.4 kg. Confirm you have SFP+ transceivers for the two fiber ports and that your ISP handoff matches the 2.5GBase-T or 1000Base-T copper interfaces. No expansion slots are present, so all connectivity is fixed.

Build and daily use

The fanless aluminum enclosure runs silently in offices or wiring closets with an MTBF of 200,091 hours. Four RJ-45 GE ports, two 2.5GBase-T ports and two SFP+ cages handle WAN, LAN and DMZ links while front USB 2.0 and rear USB 3.0 ports allow quick log export or license-key import. Dual COM ports (RJ-45 and micro-USB) give console access without adapters.

Highlights

  • TLS 1.3 inspection reveals hidden threats in encrypted traffic
  • Zero-day protection blocks unknown malware with machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • SD-WAN orchestration simplifies multi-link branch connectivity
  • Desktop fanless design runs silently in noise-sensitive spaces

Specifications

BrandSophos
SeriesXGS
ModelXGS 138
Part NumberXX138Z12ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired
Wireless TechnologyNone
Ports4 x GE copper
2 x 2.5GE copper
2 x SFP+ fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: AMD x86 CPU
Memory: 8 GB DDR4
Xstream Flow Processor (NPU): Marvell NPU
Memory: 4 GB DDR4
SSD/Storage size: 64 GB M.2
RAID Support: None
Expansion Slots: None
MTBF (hours): 200,091
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
4.4 kg / 9.70 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What cables and accessories ship with the XGS 138 appliance?

The box includes the appliance, a COM Micro-USB cable, a power cord, a rack-mount kit and a quick-start guide. No SFP+ transceivers or fiber patch cables are supplied.

Should I choose the Xstream Protection bundle or the Standard Protection bundle for this model?

Xstream Protection adds Zero-Day Protection, DNS Protection, MDR and third-party threat feeds, NDR Essential Protection and Enhanced Support on top of the Base, Network, Web and Central Orchestration licences.

What does the 1700 Mbps TLS inspection figure mean for daily traffic?

It is the maximum sustained throughput when the appliance decrypts and inspects TLS 1.3 sessions. Encrypted traffic above that rate will bypass inspection unless policies are adjusted.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.