We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
White rectangular desktop firewall appliance with front USB port and rear port array

Sophos

Sophos XY128Z12ZZPCUS XGS 128w firewall appliance 8 GB LPDDR5 64 GB Wi-Fi 6

SKU CH-V4SD-M7B1Y MPN XY128Z12ZZPCUS

Desktop firewall and wireless access point with nine 2.5 GbE copper ports, Wi-Fi 6, 8 GB LPDDR5 memory and 64 GB storage

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired + Wireless
  • Wireless TechnologyWi-Fi 6/802.11ax
  • Ports9 x 2.5GE copper 1 x SFP fiber 1 x COM RJ45 1 x COM Micro-US
  • Wired Speed2.5 Gigabit Ethernet
  • FeaturesForm Factor: Desktop CPU: Intel x86 CPU Memory: 8 GB LPDDR5

Model XGS 128W

Option 1-Year Xstream Protection

  • Wi-Fi 6 wireless for modern device connectivity
  • 9 × 2.5 Gigabit Ethernet ports for high-speed wired links
  • 8 GB LPDDR5 memory for responsive firewall processing
  • 64 GB UFS 2.1 storage for logs and firmware
  • Fanless desktop design for silent operation in noise-sensitive areas

Desktop firewall for distributed networks

The Sophos XGS 128w is a desktop security appliance that combines wired and wireless connectivity for branch offices and small sites. It runs an Intel x86 CPU with 8 GB LPDDR5 memory and 64 GB UFS 2.1 storage. Nine 2.5 Gigabit Ethernet copper ports and one SFP fiber port provide flexible uplinks, while integrated Wi-Fi 6 serves wireless clients directly.

Fanless operation with low power draw

A fanless design makes the unit silent, suited to noise-sensitive environments such as open-plan offices or retail spaces. The redesigned architecture reduces power consumption by 50 percent compared with earlier desktop models. Mean time between failures is rated at 228,927 hours, reflecting the solid-state construction and absence of moving parts.

Bundled Xstream Protection licence stack

The included one-year Xstream Protection bundle activates Base Licence, Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, DNS Protection, MDR and third-party threat feeds, NDR Essential Protection and Enhanced Support. These licences enable TLS 1.3 inspection, sandboxing, FastPath application acceleration and SD-WAN orchestration without separate purchases. A COM RJ45 port, a COM Micro-USB port with cable, a front USB 2.0 port and a rear USB 3.0 port are also supplied for local management and peripheral attachment.

Highlights

  • Wi-Fi 6 wireless for modern device connectivity
  • 9 × 2.5 Gigabit Ethernet ports for high-speed wired links
  • 8 GB LPDDR5 memory for responsive firewall processing
  • 64 GB UFS 2.1 storage for logs and firmware
  • Fanless desktop design for silent operation in noise-sensitive areas

Specifications

BrandSophos
SeriesXGS
ModelXGS 128(w)
Part NumberXY128Z12ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired + Wireless
Wireless TechnologyWi-Fi 6/802.11ax
Ports9 x 2.5GE copper
1 x SFP fiber
1 x COM RJ45
1 x COM Micro-USB (cable included)
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Wired Speed2.5 Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: Intel x86 CPU
Memory: 8 GB LPDDR5
Xstream Flow Processor (NPU): N/A
Memory: N/A
SSD/Storage size: 64 GB UFS 2.1
RAID Support: None
Expansion Slots: None
MTBF (hours): 228,927
Features:
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions320 x 212 x 44 mm
Weight2.4 kg / 5.29 lbs (unpacked)
3.9 kg / 8.60 lbs (packed)
Shipping weight2.27 kg
Package size376 × 269 × 135 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

How do I mount the 320 x 212 x 44 mm desktop chassis and connect the 9 x 2.5GE copper ports, and which step is most often missed?

Place the unit on a flat surface or shelf with at least 50 mm clearance at the sides and rear for passive cooling; the step most often missed is leaving that airflow gap because the chassis is fanless and relies entirely on convection.

What component will need replacement first during the 228,927-hour MTBF lifespan?

The internal 64 GB UFS 2.1 storage is the only non-redundant moving-part-free component that wears with write cycles; plan to refresh the appliance when log retention or firmware updates exceed its endurance.

At what sustained throughput does the TLS 1.3 inspection engine become the bottleneck?

TLS inspection tops out at 1,450 Mbps, so any continuous encrypted traffic stream above that rate will queue at the inspection stage before the 19,100 Mbps firewall or 4,650 Mbps IPS limits are reached.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.