Exposes hidden risksSophos XG Firewall provides unprecedented visibility into top risk users, unknown apps, advanced threats, suspicious payloads and much more. You also get rich on-box reporting included at no extra charge and the option to add Sophos iView for centralized reporting across multiple firewalls. Blocks unknown threatsSophos XG Firewall provides all the latest advanced technology you need to protect your network from ransomware and advanced threats including top-rated IPS, Advanced Threat Protection, Cloud Sandboxing, Dual AV, Web and App Control, Email Protection and a fullfeatured Web Application Firewall. And it’s easy to setup and manage. Automatically responds to incidentsXG Firewall is the only network security solution that is able to fully identify the source of an infection on your network and automatically limit access to other network resources in response.

The Sophos SG Series appliances are designed to provide the optimal balance between performance and protection - for diverse IT environments. This short few minute video, gives you a quick overview of what you can find in the box when you receive your Sophos XG 115 / SG 105 Although this video was made of the SG 115, the hardware is.

This is made possible with our unique Sophos Security Heartbeat™ that shares telemetry and health status between Sophos endpoints and your firewall. Potent, powerful. FastWe’ve engineered XG Firewall to deliver outstanding performance and security efficiency for the best return on your investment.

Our appliances are built using Intel multi-core technology, solid-state drives, and accelerated in-memory content scanning. In addition, Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput. Simply manage multiple firewallsSophos Central is the ultimate cloud-management platform - for all your Sophos products.

It makes day-to-day setup, monitoring, and management of your XG Firewall easy. It also provides helpful features such as alerting, backup management, one-click firmware updates and rapid provisioning of new firewalls. Optionally, Sophos Firewall Manager (SFM) provides powerful multi-device management tools for easy provisioning of consistent policies across your entire estate. And if you also want to consolidate reporting across multiple XG, SG, and Cyberoam appliances you can easily do that with Sophos iView.Security features you can’t get anywhere elseXG Firewall includes a number of innovations that not only make your job a lot easier, but also ensure your network is more secure. Synchronized SecurityAn industry first, Synchronized Security links your endpoints and your firewall to enable unique insights and coordination. Security Heartbeat™ relays Endpoint health status and enables your firewall to immediately identify and respond to a compromised system on your network. The firewall can isolate systems until they can be investigated and cleaned up.

Another Synchronized Security feature, Synchronized App Control, also enables the firewall to query the endpoint to determine the source of unknown traffic on the network. Unified Firewall RulesUser identity takes enforcement to a whole new layer with our identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device.

It literally takes firewall policy to a whole new layer. A Firewall That Thinks Like YouPre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint quickly and easily. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/outbound firewall rules and security settings for you automatically – displaying the final policy in a statement in plain English.

Insights into Top Risk UsersThe Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. Our firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behavior. Flexible deployment, no compromiseUnlike our competitors, whether you choose hardware, software, virtual or Microsoft Azure, we don’t make you compromise – every feature is available on every model and form-factor. What's New: XG Firewall joins Sophos CentralWe’re pleased to announce that the early access program (EAP) for XG Firewall management through Sophos Central is now available for you to take a test drive.As you probably know, Sophos Central is the ultimate cloud-management platform for all of your Sophos products, and it now includes XG Firewall. It makes day-to-day setup, monitoring, and management of your network protection easy.

You can quickly and easily add all your XG Firewalls into Sophos Central, giving you secure access to your entire estate from anywhere.With XG Firewall joining Sophos Central, you can now manage all your Sophos Synchronized Security products from a single cloud console. Intercept X and the rest of the Sophos suite of protection are all there, at your fingertips: mobile, email, wireless, and more.How to get started in three easy steps:. First, you’ll need a Sophos Central account if you don’t already have one. Head on over to to create a trial account or login, and while you’re there, enroll in the Early Access Program by clicking your account in the upper right corner of the console.

Next, login into your firewall and add your Sophos Central credentials to the Central Synchronization screen and select the option to Manage from Sophos Central. Then, return to Sophos Central and confirm adding your Firewall. Now you can securely access your firewall from anywhere through Sophos Central.Additional features coming soonOver time, additional features will be added to Sophos Central management of your XG Firewall including:. Backup management and storage for your regularly scheduled firewall backups. Firmware update management to make multiple firewall updates easy.

Light-touch deployment to enable easy remote setup of a new firewallAnd much more! XG Firewall v17.5 is now available. XG Firewall v17.5 is now available, bringing new Synchronized Security features, options for education institutions and more of your top requested features.The rise in targeted ransomware and other active adversary attacks makes rapid identification and response critical to contain these threats and prevent them from moving laterally across your network.Lateral Movement Protection, a new Synchronized Security feature, builds on the success of Security Heartbeat™ in providing an automated response to the presence of a threat. What’s new in XG Firewall v17.5Here’s a quick overview of the key new features in v17.5:. Synchronized Security – lateral movement protection – extends our Security Heartbeat™ automated threat isolation to prevent any threat from moving laterally or spreading across the network, even on the same subnet. Security HeartbeatCreates a link between your Sophos Central protected endpoints and your firewall to identify threats faster, simplify investigation and minimize impact from attacks. Easily incorporate Heartbeat status into firewall policies to automatically isolate compromised systems.

Advanced VPN technologiesAdds unique and simple VPN technologies including our clientless HTML5 self-service portal that makes remote access incredibly simple or utilize our exclusive light-weight secure RED (Remote Ethernet Device) VPN technology. Web ProtectionUnmatched visibility and control over all your user’s web and application activity. Powerful user and group web policyProvides enterprise-level Secure Web Gateway policy controls to easily manage sophisticated user and group web controls. Apply policies based upon uploaded web keywords indicating inappropriate use or behavior. Advanced Web Threat ProtectionBacked by SophosLabs, our advanced engine provides the ultimate protection from today’s polymorphic and obfuscated web threats. Innovative techniques like JavaScript emulation, behavioral analysis, and origin reputation help keep your network safe. High performance transparent proxyOptimized for top performance, our transparent proxy technology provides ultra-low latency inspection and HTTPS scanning of all traffic for threats and compliance.

Application Control and QoSEnables user-aware visibility and control over thousands of applications with granular policy and traffic-shaping (QoS) options based on application category, risk, and other characteristics. Synchronized Application Control automatically identifies all the unknown, evasive, and custom application on your network. Sandstorm ProtectionYour best protection against zero-day threats.

SPX Email EncryptionUnique to Sophos, SPX makes it easy to send encrypted email to anyone, even those without any kind of trust infrastructure using our patent-pending password-based encryption technology. Data Loss PreventionPolicy-based DLP can automatically trigger encryption or block/notify based on the presence of sensitive data in emails leaving the organization. Web Server ProtectionHarden your web servers and business applications against hacking attempts while providing secure access. What you getEnterpriseProtect Plus BundleTotalProtect Plus BundleBase Firewall Firewall, IPsec and SSL VPN, Wireless Protection (APs sold separately)Network Protection IPS, RED, HTML5 VPN, ATP, Security HeartbeatWeb Protection Anti-malware, Web and App visibility, control, and protectionEmail Protection Anti-spam, SPX Email Encryption, and DLPWeb Server Protection Web Application Firewall and reverse proxySandstorm Protection next-gen cloud-sandbox technologyEnhanced Support 24x7 support, security and software updates, adv. Linux cave story.

Exchange warrantyXG Series Hardware Appliance Multi-core Intel processor, solid-state storage, flexible connectivity. Security Heartbeat™ - Your firewall and your endpoints are finally talkingSophos XG Firewall is the only network security solution that is able to fully identify the user and source of an infection on your network and automatically limit access to other network resources in response. This is made possible with our unique Sophos Security Heartbeat™ that shares telemetry and health status between Sophos endpoints and your firewall, and integrates endpoint health into firewall rules to control access and isolate compromised systems.The good news is, this all happens automatically, and is successfully helping numerous businesses and organizations to save time and money in protecting their environments today. SpecsThroughput¹Revision #Form FactorPorts/Slots (Max Ports)w-model 802.11 wirelessSwappable ComponentsFirewall (Mbps)VPN (Mbps)NGFW (Mbps)AV-proxy (Mbps)XG 86(w)1desktop4a/b/g/n/acn/a3,60XG 106(w)1desktop4a/b/g/n/acopt. Power3,50XG 115(w)3desktop4a/b/g/n/acopt. Power4,0000XG 125(w)3desktop9/1 (9)a/b/g/n/acopt.

Power, 3G/4G6,5000XG 135(w)3desktop9/1 (9)a/b/g/n/acopt. Power, 3G/4G, Wi-Fi.8,0001,1801,2001,580XG 21031U8/1 (16)n/aopt. Power16,0001,4502,2002,300XG 23021U8/1 (16)n/aopt. Power20,0001,7003,0002,800XG 31021U12/1 (20)n/aopt. Power28,0002,7504,0003,300XG 33021U12/1 (20)n/aopt.

Power33,0003,2005,5006,000XG 43021U10/2 (26)n/aopt. Power41,0004,8006,0006,500XG 45021U10/2 (26)n/aopt. Power50,0005,5007,5007,000XG 55022U8/4 (32)n/aPower, SSD, Fan65,0008,4009,00010,000XG 65022U8/6 (48)n/aPower, SSD, Fan85,0009,3,000XG 75022U8/8 (64)n/aPower, SSD, Fan100,1,80017,000. 2nd Wi-Fi module option on 135w only (requires XG v17 MR6) A simple approach to comprehensive supportWe build products that are simple yet comprehensive. And, we take the same approach with our support.

With options ranging from basic technical support to those including direct access to senior support engineers and customized delivery. XG 106(w), XG 115(w) Specifications:These desktop firewall appliances offer an excellent price-to-performance ratio making them ideal for small businesses or branch offices. They are available with or without integrated 802.11ac wireless LAN, so you can even have an all-inone network security and hotspot solution without the need for additional hardware. Of course, you can also add external access points. With Intel multi-core technology designed for best performance and efficiency in a small form factor, these models come equipped with 4 GbE copper ports built-in and 1 shared SFP interface, e.g. For use with our optional DSL modem or an SFP Fiber transceiver to connect the device to a server or switch.

An optional second power supply provides an unmatched redundancy option in this product segment. EnvironmentPower consumption8.88W, 30.28 BTU/hr (idle)10.44W, 35.6 BTU/hr (full load)Operating temperature0-40°C (operating)-20 to +80°C (storage)Humidity10%-90%, non-condensingProduct CertificationsCertificationsCB, UL, CE, FCC, ISED, VCCI, MIC (Japan),RCM, CCC, KCPlanned: BISPerformance¹XG 106(w) Rev. 1XG 115(w) Rev.

3Firewall throughput3.5 Gbps4 GbpsFirewall IMIX1.8 Gbps2.0 GbpsVPN throughput360 Mbps490 MbpsIPS throughput970 Mbps1.22 GbpsNGFW (IPS + App Ctrl) max.480 Mbps1 GbpsAntivirus throughput (proxy)450 Mbps600 MbpsConcurrent connections3,200,0006,000,000New connections/sec28,00035,000Maximum licensed usersunrestrictedunrestrictedWireless Specification (XG 106 Wireless and XG 115 Wireless only)No. RM-SR-T1List Price: $139.00Our Price: $134.00Add to CartThe RM-SR-T1 gives you the ability to mount your Sophos desktop firewalls in a 19' rack.

The rack is tailored specifically for the listed models to guarantee a perfect fit. In addition, the connections are brought to the front for easy access. The power supply is fixed to prevent an accidental loss of power.Assembly will take about 5 minutes. Simply slide your Sophos device in the kit, place the retainers, connect the supplied cables to the keystones and fix the power supply to the rack.Other colors can be delivered on project basis.Please note: This model is not compatible with the new Sophos Rev. Check out the new and for the newer versions of the firewall. SpecificationsColorRAL 5010 Gentian BlueHeight1.3U2U with the supplied front plateDimensions(height x width x depth)59 x 482 x 217mmNumber of connections brought to the front5Console port to the frontYesCables5x 0.5m cablesCouplers5x RJ45 couplersSupported Models- Sophos SG/XG 85- Sophos SG/XG 105- Sophos SG/XG 115What's in the box- 1x SoRack + RJ45 couplers- 1x Rackmount.IT front plate- Cables- Assembly materials- Installation guideEAN338UPC39. RM-SR-T5List Price: $139.00 Our Price: $134.00Add to CartThe RM-SR-T5 gives you the ability to mount your Sophos desktop firewalls in a 19' rack.

The rack is tailored specifically for the listed models to guarantee a perfect fit. In addition, the connections are brought to the front for easy access. The power supply is fixed to prevent an accidental loss of power. Assembly will take about 5 minutes. Simply slide your Sophos device in the kit, place the retainers, connect the supplied cables to the keystones and fix the power supply to the rack.

Other colors can be delivered on project basis SpecificationsColorRAL 9003 Signal WhiteHeight1.3U2U with the supplied front plateDimensions(height x width x depth)59 x 482 x 217mmNumber of connections brought to the front6Console port to the frontYesCables6x 0.5m cablesCouplers6x RJ45 couplersSupported Models- Sophos XG 105 Rev. 3- Sophos XG 115 Rev. 3What's in the box- 1x SoRack + RJ45 couplers- 1x Rackmount.IT front plate- Cables- Assembly materials- Installation guideEAN543UPC44. Documentation:Download the (PDF).Download the (PDF).Pricing Notes:. If your existing XG appliance does not have an active subscription or license, you will need to purchase a new license. If you currently have an active subscription with an existing SG appliance, you can renew that subscription license by purchasing the renewal.

AP warranty is not included for the XG Wireless Subscriptions and will need to be purchased separately. TotalProtect includes: Appliance and FullGuard subscription (Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support). TotalProtect Plus additionally includes Sandstorm. EnterpriseProtect includes:Appliance and EnterpriseGuard subscription (Network Protection, Web Protection and Enhanced Support). EnterpriseProtect Plus additionally includes Sandstorm. FullGuard Subscription Includes: Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support. FullGuard Plus additionally includes Sandstorm.

EnterpriseGuard Subscription Includes: Network Protection, Web Protection and Enhanced Support. EnterpriseGuard Plus additionally includes Sandstorm.

Security Heartbeat functionality is available when XG Firewall Network Protection, EnterpriseGuard or FullGuard subscription is used in conjunction with Central Endpoint Advanced, Cloud Enduser Protection and Intercept X licences. Pricing and product availability subject to change without notice.

Internet firewall for a small office helps you protect your organization against advanced threats, configure and deploy the network security and see deep into what’s happening inside your network. Specifying the right appliance is dependent on a number of factors and involves developing a usage profile for the users and the network environment. For best results we recommend using the following some steps:

1. Identify the “Total User” Number:

Understand your environment like browsing behavior, application usage.

For 10 users: each user may have 1 PC or Laptop, and 1-2 mobile device like smartphone, tablet.

So the total user is from 20 to 30.

If the users are heavy surfing, frequently using media transfer, video, social network, you need to multiplied the total user with 1.5 or 2. So total user is maybe in range 30-50.

2. Specific throughput requirements

Depending on your environment there might be specific throughput requirements driving an adjustment of your first estimate the firewall.

The maximum available internet uplink capacity

• Maximum upload and download of internet link. Today FTTH line has the upload and download speed in 20-100Mbps.
• Number of internet link: if you have 2 or more internet link, the load balancing features is requirement, and the traffic will peak in high.
• Higher bandwidth, you need higher Internet firewall model.

3. The features and policy need for control the network

• Are you need Application control: control Facebook, Youtube, Download…?
• Are you need Intrusion Prevention System to protection your network?
• Do you have site-to-site VPN, how many sites?
• How much web traffic (Mbps and requests/s) is being generated – on average/at peak times?
• Are you need Advanced Threat Protection?
• How to authentication your users?

Using more features, you need more hardware performance.

4. Choose the firewall model

As average 10 users network, “total user” around 30, with full features you can enable, we suggest some firewall model:

4.1. Sophos UTM SG 115 Fullguard License – $831

SG 115 desktop firewall appliances offer an excellent price-to-performance ratio

Price based from Amazon: Sophos UTM SG 115 Security Appliance StandardProtect Bundle with 4 GE ports, FullGuard License, Standard 8×5 Support – 1 Year

4.2 Fortigate 60D Bundle – $680

4.3 Sonicwall TZ500 Total Secure – $964

Comparison table

desktop

desktop

desktop