Sophos XG 230
Sophos XG Firewall provides comprehensive next-generation firewall protection that exposes hidden risks, blocks unknown threats, and automatically responds to incidents.
Exposes hidden risks
Sophos XG Firewall provides unprecedented visibility into top risk users, unknown apps, advanced threats, suspicious payloads and much more. You also get rich on-box reporting included at no extra charge and the option to add Sophos iView for centralized reporting across multiple firewalls.
Blocks unknown threats
Sophos XG Firewall provides all the latest advanced technology you need to protect your network from ransomware and advanced threats including top-rated IPS, Advanced Threat Protection, Cloud Sandboxing, Dual AV, Web and App Control, Email Protection and a fullfeatured Web Application Firewall. And it’s easy to setup and manage.
Automatically responds to incidents
XG Firewall is the only network security solution that is able to fully identify the source of an infection on your network and automatically limit access to other network resources in response. This is made possible with our unique Sophos Security Heartbeat™ that shares telemetry and health status between Sophos endpoints and your firewall.
Potent, powerful… fast
We’ve engineered XG Firewall to deliver outstanding performance and security efficiency for the best return on your investment. Our appliances are built using Intel multi-core technology, solid-state drives, and accelerated in-memory content scanning. In addition, Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput.
Simply manage multiple firewalls
Sophos Central is the ultimate cloud-management platform – for all your Sophos products. It makes day-to-day setup, monitoring, and management of your XG Firewall easy. It also provides helpful features such as alerting, backup management, one-click firmware updates and rapid provisioning of new firewalls. Optionally, Sophos Firewall Manager (SFM) provides powerful multi-device management tools for easy provisioning of consistent policies across your entire estate. And if you also want to consolidate reporting across multiple XG, SG, and Cyberoam appliances you can easily do that with Sophos iView.
Security features you can’t get anywhere else
XG Firewall includes a number of innovations that not only make your job a lot easier, but also ensure your network is more secure.
Synchronized Security
An industry first, Synchronized Security links your endpoints and your firewall to enable unique insights and coordination. Security Heartbeat™ relays Endpoint health status and enables your firewall to immediately identify and respond to a compromised system on your network. The firewall can isolate systems until they can be investigated and cleaned up. Another Synchronized Security feature, Synchronized App Control, also enables the firewall to query the endpoint to determine the source of unknown traffic on the network.
Unified Firewall Rules
User identity takes enforcement to a whole new layer with our identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device. It literally takes firewall policy to a whole new layer.
A Firewall That Thinks Like You
Pre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint quickly and easily. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/outbound firewall rules and security settings for you automatically – displaying the final policy in a statement in plain English.
Insights into Top Risk Users
The Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. Our firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behavior.
Flexible deployment, no compromise
Unlike our competitors, whether you choose hardware, software, virtual or Microsoft Azure, we don’t make you compromise – every feature is available on every model and form-factor.
| Performance | XG 230 |
| Firewall throughtput | 20 Gbps |
| Firewall IMIX | 6.8 Gbps |
| VPN throughput | 1.7 Gbps |
| IPS throughtput | 4.2 Gbps |
| NGFW (IPS + App Ctrl) max. | 3.5 Gbps |
| Antivirus throughtput (proxy) | 2.8 Gbps |
| Concurrent connections | 8,200,000 |
| New connections/sec | 140,000 |
| Maximum licensed users | unrestricted |
| Physical interfaces | |
| Storage (local quarantine/logs) | integrated SSD |
| Ethernet interfaces (fixed) | 6 GbE cooper (incl. 2 bypass pairs) 2 GbE SFP* |
| No. of expansion slots | 1 |
| FleXi Port modules (optional) | 8 port GbE cooper 8 port GbE SFP* 2 port 10 GbE SFP+* 4 port 10 GbE SFP+* 2 port 40 GbE QSFP+* 4 port GbE PoE 8 port GbE PoE 4 port GE cooper LAN bypass |
| Connectivity modules (optional) | SFP DSL module (VDSL2) SFP/SFP+ Transceivers |
| I/O ports (rear) | 2 x USB 3.0 (front) 1 x Micro USB (front) 1 x USB 3.0 (rear) 1 x COM (RJ45) (front) 1 x HDMI (rear) |
| Display | Multi-function LCD module |
| Power supply | Internal auto ranging 100-240VAC, 50-60 Hz Redundant PSU optional (external) |
| Physical specifications | |
| Mounting | 1U rack mount (2 rackmount ears included) |
| Dimensions Width x Depth x Height | 438 x 344.4 x 44 mm 17.24 x 13.56 x 1.75 inches |
| Weight | 5.2 kg / 11.46 lbs (unpacked) 7.7 kg / 16.98 lbs (packed) |
| Environment | |
| Power consumption | XG 230: 21W, 72 BTU/hr (idle) 41W, 141 BTU/hr (full load) |
| Operating temperature | 0-40 C (operating) -20 to +80 C (storage) |
| Humidity | 10%-90%, non-condensing |
| Product Certifications | |
| Certifications | CB, UL, CE, FCC Class A, ISED, VCCI, RCM, CCC, KC, BIS |
Subscriptions
| FullGuard Plus (included in TotalProtect Plus) | ||||||||||||||
| FullGuard (included in TotalProtect) | ||||||||||||||
| EnterpriseGuard Plus (included in EnterpriseProtect Plus) |
||||||||||||||
| EnterpriseGuard (included in EnterpriseProtect) |
||||||||||||||
| Service | Base Firewall | Sandstorm Protection |
Network Protection |
Web Protection | Email Protection | Webserver Protection |
||||||||
| General Management (incl. HA) | ● | |||||||||||||
| Firewall, Networking and Routing | ● | |||||||||||||
| Base Traffic Shaping and Quotas | ● | |||||||||||||
| Secure Wireless | ● | |||||||||||||
| Authentication | ● | |||||||||||||
| Self-Serve User Portal | ● | |||||||||||||
| Base VPN Options | ● | |||||||||||||
| Sophos Connect IPSec Client | ● | |||||||||||||
| Sandstorm Protection | ● | |||||||||||||
| Intrusion Prevention (IPS) | ● | |||||||||||||
| ATP and Security Heartbeat™ | ● | |||||||||||||
| Remote Ethernet Device (RED) VPN | ● | |||||||||||||
| Clientless VPN | ● | |||||||||||||
| Synchronized Application Control | ● | |||||||||||||
| Web Protection and Control | ● | |||||||||||||
| Application Protection and Control | ● | |||||||||||||
| Cloud Application Visibility | ● | |||||||||||||
| Web and App Traffic Shaping | ● | |||||||||||||
| Email Protection and Control | ● | |||||||||||||
| Email Quarantine Management | ● | |||||||||||||
| Email Encryption and DLP | ● | |||||||||||||
| Web Application Firewall Protection | ● | |||||||||||||
| Logging and Reporting | ● | ● | ● | ● | ● | ● | ||||||||
Specs
System Performance
| Firewall throughput | 20 Gbps |
| Firewall IMIX | 6.8 Gbps |
| Antivirus Throughput | 2.8 Gbps |
| Concurrent connections | 8,200,000 |
| New connections/sec | 140,000 |
| IPS throughput | 4.2 Gbps |
| NGFW Throughput | 3 Gbps |
| IPSec VPN throughput | 1.7 Gbps |
Physical interfaces
| GE RJ45 Ports | 6 GbE copper (incl. 2 bypass pairs) |
| GE RJ45 WAN Ports | 6 GbE copper (incl. 2 bypass pairs) |
| GE SFP Slots | 2 GbE SFP* |
| I/O ports | 2 x USB 3.0 (front) 1 x Micro USB (front) 1 x USB 3.0 (rear) 1 x COM (RJ45) (front) 1 x HDMI (rear) |
| Storage | integrated SSD |
| Display | Multi-function LCD module |
Dimensions & Enviroment
| Mounting | 1U rack mount (2 rackmount ears included) |
| Dimensions Width x Depth x Height (inches) | 17.24 x 13.56 x 1.75 inches |
| Dimensions Height x Width x Length (mm) | 438 x 344.4 x 44mm |
| Weight | 5.2 kg / 11.46lb (unpacked) 7.7 kg / 16.98 lbs (packed) |
| Power supply | Internal auto-ranging 100-240VAC, 50-60 Hz Redundant PSU optional (external) |
| Power Consumption | 21W, 72 BTU/hr (idle) 41W, 141 BTU/hr (full load) |
| Operating Temperature | 0-40°C (operating) -20 to +80°C (storage) |
| Humidity | 10%-90%, non-condensing |
Wireless Specification (XG Wireless only)
Product Certifications
| Certifications | CB, UL, CE, FCC Class A, ISED, VCCI, RCM, CCC, KC, BIS |
