Skip to Content


Performance  and Security

The X G S firewall

This is a dual-processor system that effectively detects and repels attacks on your network and, in the event of a malware infection, isolates the affected device to prevent an outbreak in the network. 

And thanks to the Xstream Flow Processor , a powerful multi-core processor, all of this is possible without any loss of performance.

Detect. Defend. Protect.

The three pillars of the XGS firewall for ensuring security in your network.

Uncover risks

The XGS Firewall helps you to recognise the risks of certain activities, identify suspicious traffic and analyse complex threats. This way you can regain an overview of your network.

Repel threats

Top-class protection technologies are used here. Deep learning, i.e. a neural network that is constantly evolving, and intrusion prevention specifically repel malware and intruders for you.

Isolate infected systems

Should an infection occur, the firewall reacts automatically, isolates the affected system and protects the network from spreading.

Extra-strong performance with full protection

The  X G S  - appliances already ship with the new  Sophos Firewall Operating System (SFOS) in  version 22.0 and, with their dedicated Xstream Flow Processors  can ensure that applications are accelerated,  TLS inspection can be carried out with high performance  and strong threat protection is still delivered.

The Xstream architecture of the Sophos Firewall is designed to provide an incredible level of transparency and protection without having to fear any loss of performance. In this way, we ensure that your network can easily withstand today's threats.

Odoo • Image and text

TLS 1.3 inspection

Encryption is important - unfortunately, hackers have noticed this too!  
According to current statistics, around 90% of all internet traffic is encrypted and therefore cannot be detected by most firewalls. This makes it easier for hackers to smuggle malware and other potentially unwanted applications into networks and cause considerable damage. SSL inspection has been possible for some time, but unfortunately many network administrators have so far feared that this function could have a negative impact on network performance and thus on the user experience.

We can take this worry away from you, because the Sophos Firewall can inspect encrypted traffic without any problems, so that there is no noticeable difference for users and administrators, despite the incredibly increased security!

Deep Packet Inspection

Sophos places great importance on ensuring that you do not have to compromise on performance for the sake of security. And so, of course, do we.
With the powerful Deep Packet Inspection (DPI)  engine, traffic is examined for threats without slowing the process down through a proxy. The processing of the data can therefore be offloaded entirely to the DPI engine, which reduces latency considerably and significantly increases overall efficiency.

Sophos Firewall therefore prevents the spread of the latest ransomware and blocks security vulnerabilities with high-performance streaming DPI, with additional Next Gen Intrusion Prevention, web protection and Application Control , as well as deep learning and sandboxing supported by SophosLabs Latrix.

Application acceleration

Acceleration of business application traffic to improve your workflow.   
Traffic for branch offices, cloud application servers or remote users is the most relevant for your business. And of course, no malware checks are necessary for this trusted traffic. These data can therefore be intelligently forwarded through the FastPath. This reduces latency enormously and overall performance is optimised, so that computing power can be concentrated on the threats that really matter.

Thanks to the new Xstream Flow Processors, traffic such as VoIP, video, SaaS, SD-WAN and other trusted applications can be transmitted via the FastPath automatically or through configurable policies.


 

User interface

With the new hardware built into the XG series came integration into Synchronized Security and, with it, the move to a new user interface.
In the so-called Control Centre you will find all the tools and functions you need to increase your network security dramatically, with virtually unchanged performance.

See for yourself the user-friendly design of the interface and what it has to offer.

Odoo - example 2 for three columns

XGS desktop models

All the security features of the larger appliances are supported, but the form factor has been adapted for deployment in small and medium-sized businesses or branch offices.

Further information
Odoo - example 2 for three columns

XGS 1U models

These models are the perfect solution for providing medium-sized companies and companies spread across several sites with the security they need.

Further information
Odoo - example 2 for three columns

XGS 2U models

This is the high-end firewall of this series. These models are used in large, globally distributed companies and data centres and deliver maximum performance.

Further information

Sophos Firewalls - General features

Please note that some features depend on the licence. To find out more about licensing, please feel free to  contact us!


Network Protection

Exactly the protection you need to fend off sophisticated attacks and complex threats and to give trusted users secure access to your network.  



Wireless Protection

Our firewall solutions include an integrated wireless controller that is compatible with all models of our Sophos Wireless Access Points. With it, you can set up, manage and secure Wi-Fi networks within a few minutes.


Web Protection

Comprehensive protection against current web threats and powerful policy tools ensure that your users can browse the internet safely and productively.


Sandstorm Sandboxing

Sophos Sandstorm takes Advanced Threat Protection to a new level – with state-of-the-art protection, visibility and analysis functions to defend against targeted attacks. Sophos Sandstorm detects evasive malware quickly and reliably before it can enter your network.

Email Protection

Comprehensive protection for SMTP and POP messages against spam, phishing and data loss with our unique all-in-one security, which combines policy-based email encryption with DLP and anti-spam.


Webserver Protection

Harden your web servers and Microsoft Enterprise Applications against hacking attempts and provide external users with secure access by means of reverse proxy authentication.