We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in

Sophos

Sophos XX128Z12ZZPCUS XGS 128 firewall appliance 8 GB LPDDR5 64 GB UFS 2.1 9 port 2.5GBase-T

SKU CH-Q77Y-X1TRM MPN XX128Z12ZZPCUS

Desktop firewall appliance with nine 2.5 GbE copper ports, 8 GB LPDDR5 memory, 64 GB UFS 2.1 storage and 18.65 Gbit/s firewall throughput

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired
  • Wireless TechnologyNone
  • Ports9 x 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5

Option 1-Year Xstream Protection

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • 65 Gbit/s firewall throughput handles high-volume network demand
  • 9 × 2.5GBase-T copper ports connect devices at multi-gigabit speed
  • Fanless desktop form factor runs silently in noise-sensitive areas
  • 8 GB LPDDR5 memory with 64 GB UFS 2.1 storage powers the security engine

XGS 128 desktop firewall for small offices

The Sophos XGS 128 is a desktop network security appliance built around an Intel x86 processor with 8 GB of LPDDR5 memory and 64 GB of UFS 2.1 storage. Nine 2.5GBase-T copper ports and one SFP fiber port provide high-speed wired connectivity for small to mid-sized businesses that need consolidated threat protection without rack mounting.

Replaces older 1 GbE appliances when 2.5G

The jump is worth it when your internet link or LAN segments exceed 1 Gbps and you want to inspect encrypted traffic at line rate. TLS 1.3 inspection runs at 1 450 Mbps, while IPS and threat protection deliver 4 650 Mbps and 4 000 Mbps respectively. If your current gateway cannot sustain those speeds under full inspection, this model removes the bottleneck.

Limited by fixed port count

The appliance offers exactly nine copper ports and one SFP slot with no expansion slots, so additional interfaces require a separate switch. Throughput figures such as 19 100 Mbps firewall and 15 050 Mbps IPsec VPN are single-device maximums; multi-site SD-WAN orchestration depends on the Sophos Central cloud platform rather than local clustering.

Highlights

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • 65 Gbit/s firewall throughput handles high-volume network demand
  • 9 × 2.5GBase-T copper ports connect devices at multi-gigabit speed
  • Fanless desktop form factor runs silently in noise-sensitive areas
  • 8 GB LPDDR5 memory with 64 GB UFS 2.1 storage powers the security engine

Specifications

BrandSophos
SeriesXGS
ModelXGS 128
Part NumberXX128Z12ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired
Wireless TechnologyNone
Ports9 x 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: Intel x86 CPU
Memory: 8 GB LPDDR5
Xstream Flow Processor (NPU): N/A
Memory: N/A
SSD/Storage size: 64 GB UFS 2.1
RAID Support: None
Expansion Slots: None
MTBF (hours): 228,927
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
3.9 kg / 8.60 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What are the exact dimensions of the XGS 128 desktop chassis for rack or shelf planning?

The unit measures 320 mm wide, 212 mm deep and 44 mm high, weighing 2.4 kg unpacked, so it fits a standard 1U desktop footprint without rails.

Which cable is required for the initial console session on the COM Micro-USB port?

A Micro-USB cable is included in the box; connect it to the front COM Micro-USB port and a management PC to reach the CLI for first-time setup.

Does the 64 GB UFS 2.1 storage module require any scheduled replacement or health monitoring?

The soldered UFS 2.1 storage has no user-replaceable parts and no published wear-out interval; the 228,927-hour MTBF covers the entire appliance.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.