We take cryptocurrency — so the coins you hold can buy real hardware.Pay in crypto, spend it on real hardware. Free insured shipping worldwide over $399. Plain, unbranded boxes, sent from Germany.Free insured shipping over $399. Your rate is locked for 30 minutes once checkout opens.Rate locked 30 minutes. Every item sealed, serial-checked and covered by a 24-month warranty.Sealed, 24-month warranty.

Saved items Sign in
Compact white desktop firewall appliance with four RJ-45 ports and internal Wi-Fi 6 antenna

Sophos

Sophos XZ88ZZ36ZZPCUS XGS 88w firewall appliance 4 GB LPDDR5 16 GB eMMC Wi-Fi 6 4×2.5 GbE

SKU CH-PY2D-8MQ41 MPN XZ88ZZ36ZZPCUS

Desktop firewall appliance with 4 GB LPDDR5 memory, 16 GB eMMC storage, Wi‑Fi 6 wireless and four 2.5 GbE RJ‑45 ports

  • Firewall TypeFirewalls / Security Appliances
  • TypeWired + Wireless
  • Wireless TechnologyWi-Fi 6/802.11ax
  • Ports4 x 2.5 GBase-T - RJ-45 1 x management - RJ-45 1 x managemen
  • Wired Speed2.5 Gigabit Ethernet Ethernet, Fast Ethernet Gigabit Etherne
  • FeaturesForm Factor: Desktop CPU: Intel x86 CPU Memory: 4 GB LPDDR5

Model XGS 88W

Option 3-Year Standard Protection

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • Four 2.5 GbE ports deliver high-speed wired connectivity
  • Wi-Fi 6 built-in provides modern wireless access for devices

Sophos XGS 88w firewall appliance

The Sophos XGS 88w is a desktop firewall appliance that combines wired and wireless connectivity in a fanless chassis. It integrates a 2x2 Wi-Fi 6 radio, four 2.5 GBase-T ports and a dedicated management port. An Intel x86 CPU with 4 GB LPDDR5 memory and 16 GB eMMC storage runs the security stack. The unit is aimed at small offices or branch locations that need encrypted traffic inspection and wireless access in one box.

2.5 GbE ports and Wi-Fi 6 upgrade

The appliance replaces older 1 GbE firewalls by providing 2.5 GbE LAN interfaces and Wi-Fi 6 for higher client density. The jump is worth it when encrypted traffic volumes push legacy units past their TLS inspection limits of a few hundred megabits. It also suits sites that previously ran separate access points and want a single managed device. Buyers who need expansion slots, a second wireless radio or higher VPN throughput should look elsewhere.

4 GB LPDDR5 and 16 GB eMMC headroom

The 4 GB LPDDR5 memory and 16 GB eMMC storage handle the bundled Standard Protect licence pack including IPS, web filtering and TLS 1.3 inspection at 600 Mbps. Firewall IMIX throughput reaches 6 500 Mbps and threat protection runs at 2 000 Mbps. IPsec VPN peaks at 6 000 Mbps. The platform runs out when concurrent inspected sessions exceed the memory budget or when log retention needs exceed the onboard eMMC capacity.

Highlights

  • TLS 1.3 inspection reveals threats hidden in encrypted traffic
  • Zero-day protection blocks unknown malware using machine learning and sandboxing
  • FastPath acceleration offloads trusted traffic to boost throughput
  • Four 2.5 GbE ports deliver high-speed wired connectivity
  • Wi-Fi 6 built-in provides modern wireless access for devices

Specifications

BrandSophos
SeriesXGS
ModelXGS 88(w)
Part NumberXG88ZZ00ZZPCUS
Firewall TypeFirewalls / Security Appliances
TypeWired + Wireless
Wireless TechnologyWi-Fi 6/802.11ax
Ports4 x 2.5 GBase-T - RJ-45
1 x management - RJ-45
1 x management (micro-USB) - Type B
1 x USB 3.0 - Type A
1 x USB 2.0 - Type A
Wired Speed2.5 Gigabit Ethernet
Ethernet, Fast Ethernet
Gigabit Ethernet
FeaturesForm Factor: Desktop
CPU: Intel x86 CPU
Memory: 4 GB LPDDR5
Xstream Flow Processor (NPU): N/A
Memory: N/A
SSD/Storage size: 16 GB eMMC
RAID Support: None
Expansion Slots: None
Internal Wi-Fi-Card: Wi-Fi 6/802.11ax 2x2 dual band concurrent full-size mini PCIe card 2 antennas
MTBF (hours): 936,308
firewall protection
Web threat protection
Intrusion Prevention System (IPS)
Deep Packet Inspection (DPI)
Zero-Touch Deployment
firmware upgradable
SD-WAN support
VPN support
Dimensions200 x 180 x 44 mm
Weight1.4 kg / 3.08 lbs (unpacked)
2 kg /4.41 lbs (packed)
Shipping weight2.77 kg
Package size277 × 249 × 117 mm

Other versions of this model

5 more in the same range

Same family, different memory, cooler or clock — compare before you commit.

Questions about this item

What desktop clearance does the 200 x 180 x 44 mm chassis need?

The unit measures 200 mm wide, 180 mm deep and 44 mm high, so allow at least that footprint plus cable space for the four 2.5 GbE RJ-45 ports, management RJ-45, micro-USB console, USB 3.0 and USB 2.0 connectors on the rear.

Which step is often missed when registering the appliance to Sophos Central?

After connecting the management port or Wi-Fi 6 interface, you must claim the device in Sophos Central using the serial number on the label before the 3-year Standard Protect licence activates.

When should the 16 GB eMMC storage be checked for wear?

The 16 GB eMMC holds firmware, logs and signatures; monitor disk usage in the web admin and plan replacement if reported health drops below the vendor threshold, typically after several years of continuous logging.

Also in this aisle

People compared these

Same shelf, same checkout — eight coins and a 30-minute rate lock.