Sophos XGS 87 Firewall Hardware Appliance [XA8BTCHEU] - Avanet

Skip to content Sign in

• Firewall
• Switch
• Access Point
• SD-RED
• Accessories
• Central

• Blog
• Support
• Contact

Shopping Cart Your cart is currently empty.

Return to shop

• Login
• Sign Up

Username or Email Address

Password

Remember Me Forgot Password?

Log In

Email

Password

Wir verwenden Ihre personenbezogenen Daten, um eine möglichst gute Benutzererfahrung auf dieser Website zu ermöglichen, den Zugriff auf Ihr Konto zu verwalten und für weitere Zwecke, die in unserer privacy policy beschrieben sind.

Register

Username or Email Address

Get New Password

← Back to login

XGS 87 About the product	XGS 107 About the product	XGS 116 About the product	XGS 126 About the product	XGS 136 About the product
CPU (Core/Threads)	x86 AMD CPU	x86 AMD CPU	x86 AMD CPU	x86 AMD CPU	x86 AMD CPU
CPU (Memory)	4 GB DDR4	4 GB DDR4	4 GB DDR4	6 GB DDR4	8 GB DDR4
NPU (Core/Threads)	Marvell NPU	Marvell NPU	Marvell NPU	Marvell NPU	Marvell NPU
NPU (Memory)	2 GB DDR4	2 GB DDR4	4 GB DDR4	4 GB DDR4	4 GB DDR4
Firewall Throughput	3 700 MBit/s	7 000 MBit/s	7 700 MBit/s	10 500 MBit/s	11 500 MBit/s
Firewall IMIX	2 500 MBit/s	2 900 MBit/s	3 500 MBit/s	4 000 MBit/s	4 700 MBit/s
Latency (64 byte UDP)	6 µs	6 µs	8 μs	8 μs	8 μs
IPS Throughput	1 015 MBit/s	1 355 MBit/s	2 000 MBit/s	2 600 MBit/s	3 300 MBit/s
Throughput Threat Protection	240 MBit/s	330 MBit/s	685 MBit/s	900 MBit/s	1 000 MBit/s
Simultaneous connections	1 600'000	1 600'000	1 600'000	5 000 000	6 400 000
New connections/sec	35 700	44 400	61 500	69 900	74 500
IPsec VPN throughput	750 MBit/s	900 MBit/s	1100 MBit/s	1800 MBit/s	2500 MBit/s
Xstream SSL/TLS Inspection	375 MBit/s	420 MBit/s	650 MBit/s	800 MBit/s	950 MBit/s
Concurrent connections XStream SSL/TLS	8192	8192	8192	12288	18 432
Storage (local quarantine/logs)	16 GB eMMC	Integrated 64 GB SSD	Integrated 64 GB SSD	Integrated 64 GB SSD	Integrated 64 GB SSD
Ethernet interfaces (fixed)	4 GbE copper, 1 x SFP fiber optic	8 GbE copper, 1 x SFP fiber optic	8 GbE copper 1 GbE SFP	12 GbE copper, 2 x SFP fiber optics	10 GbE copper, 2-port 2.5 GbE copper, 2 x SFP fiber
Power over Ethernet (min.)	-	-	1 x GbE 803.2at (max. 30 W)	2 x GbE (max. 30 W per port)	2 x 2.5 GbE (max. 30 W per port)
Administrative ports	1 x COM (RJ45), 1 x Micro-USB (cable incl.)	1 x COM (RJ45), 1 x Micro-USB (cable incl.)	1 x COM (RJ45), 1 x Micro-USB (cable incl.)	1 x COM (RJ45), 1 x Micro-USB (cable incl.)	1 x COM (RJ45), 1 x Micro-USB (cable incl.)
Other I/O ports	1 x USB 2.0 (front), 1 x USB 3.0 (rear)	1 x USB 2.0 (front), 1 x USB 3.0 (rear)	1 x USB 2.0 (front), 1 x USB 3.0 (rear)	1 x USB 2.0 (front), 1 x USB 3.0 (rear)	1 x USB 2.0 (front), 1 x USB 3.0 (rear)
Number of expansion slots	-	-	1	1	1
Connection modules (optional)	SFP DSL module (VDSL2), SFP transceiver	SFP DSL module (VDSL2), SFP transceiver	SFP DSL module (VDSL2), 3G/4G module, SFP transceiver	SFP DSL module (VDSL2), 3G/4G module, SFP transceiver	SFP DSL module (VDSL2), 3G/4G module, SFP transceiver
Assembly	Rack mount kit available (must be ordered separately)	Rack mount kit available (must be ordered separately)	Rack mount kit available (must be ordered separately)	Rack mount kit available (must be ordered separately)	Rack mount kit available (must be ordered separately)
Dimensions width x depth x height	230 x 44 x 205.5 mm	230 x 44 x 205.5 mm	320 x 44 x 213 mm	320 x 44 x 213 mm	320 x 44 x 213 mm
Weight	1.36 kg (without packing) 2.75 kg (with packing)	1.4 kg (without packing), 2.8 kg (with packing)	2.2 kg (without packaging) 4.2 kg (with packaging)	2.4 kg (without packaging) 4.4 kg (with packaging)	2.4 kg (without packaging) 4.4 kg (with packaging)
Power supply	External, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W	External, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W Optional second redundant power supply Power supply	External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply	External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply	External, automatic range adjustment AC-DC 100-240 VAC, 2.5 A@50-60 Hz 12 VDC, 12.5 A, 150 W Optional second redundant power supply power supply
Power consumption	23.2 W/79.16 BTU/h (87) (idle) 43.4 W/148.09 BTU/h (full load)	26.1 W/89.06 BTU/h (idle), 53.9 W/183.91 BTU/h (full load)	28 W, 96 BTU/h (idle), 57 W/195 BTU/h (full load)	30 W/102 BTU/h (idle), 59 W/202 BTU/h (full load)	30 W/102 BTU/h (idle), 62 W/212 BTU/h (full load)
Incl. Use of PoE	-	-	38 W/130 BTU/h (full load)	76 W/260 BTU/hr (max.)	76 W/260 BTU/hr (max.)
Operating temperature	0 °C to 40 °C (operation), -20 to +70 °C (storage)	0 °C to 40 °C (operation), -20 to +70 °C (storage)	0 °C to 40 °C (operation), -20 to +70 °C (storage)	0 °C to 40 °C (operation), -20 to +70 °C (storage)	0 °C to 40 °C (operation), -20 to +70 °C (storage)
Humidity	10% to 90%, non-condensing	10% to 90%, non-condensing	10% to 90%, non-condensing	10% to 90%, non-condensing	10% to 90%, non-condensing

SOLD OUT🔍

1. 
2. 

Sophos XGS 87 Appliance

494,10 €

New model available!

A successor model is available for this product, which offers significantly higher performance for the same price - the performance has been almost doubled. We therefore recommend opting for the newer model. You can find all the information you need in our blog post →

Licensing Basislizenz

1-year warranty, 3 SFOS updates included, 90 Days manufacturer support

Free of charge

Standard Protection

Network Protection, Web Protection, Enhanced Support

Term — Months

12 24 36 60

License type

╳

Subscription

With a subscription, we manage your firewall license for you. The license is renewed in 12-month increments as long as the subscription is active. 60 days before each renewal, we will inform you of the automatic renewal by e-mail. If this suits you, you don't need to do anything else; the license will continue to run seamlessly and you will receive a new invoice. If you do not wish to renew, a short reply to the reminder e-mail is sufficient and we will revoke the license at the end of the contract.

Important: Your firewall remains registered with us during the subscription period. This is only for license management - we have no access to your firewall! The central management of the firewall can still be linked to your account as normal. If you cancel the subscription, we will move the firewall registration back to your Central account.

Fixed term

With a fixed-term license, you take over the entire administration yourself. The firewall is registered directly to the end customer and you receive a license certificate from Sophos with an activation key. You must enter this manually in your Central Account to activate the license. The license expires after 12, 24 or 36 months and you must remember to renew it in time by ordering a new license from your Sophos partner. This process requires extra steps and attention to ensure that your firewall works seamlessly. In comparison, the subscription is much easier and more convenient, as everything runs automatically without you having to worry about it.

Fixed term Subscription Xstream Protection

Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Enhanced Support

Term — Months

12 24 36 60

License type

Fixed term Subscription Epic Protection

Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Email Protection, Web Server Protection, Enhanced Support

Term — Months

12 24 36 60

License type

Fixed term Subscription Start date Immediately

Your fixed term license begins on the day Sophos completes order processing (usually between 1–2 business days) and expires at the end of the purchased term, regardless of when the software is activated and/or the hardware arrives.

Specific date

Select a desired date when the term of your license should start.

Day Month Year Immediately

Your subscription will start automatically on 01.01.2026. We will activate a trial license for the remaining days so that you can start using the firewall immediately.

Specific date

Is the proposed start date too soon for you? Postpone the start of your subscription to a later date.

01.02.202601.03.202601.04.202601.05.2026 High availability No high availability

Downtimes are acceptable and no immediate replacement is required in the event of a hardware failure.

Active/Passive Cluster

Get a second piece of hardware to improve the reliability of your network.

Delivery time1-2 Workdays14-21 Workdays14-21 Workdays14-21 Workdays14-21 Workdays14-21 Workdays14-21 Workdays14-21 Workdays14-21 WorkdaysAvailability 1in stock 0in stock 0in stock 0in stock 0in stock 0in stock 0in stock 0in stock 0in stockDeliver to Austria Belgium Bulgaria Croatia Cyprus Czech Republic Denmark Estonia Finland France Germany Greece Hungary Ireland Italy Latvia Liechtenstein Lithuania Luxembourg Malta Netherlands Poland Portugal Romania Slovakia Slovenia Spain Sweden Switzerland

Out of stock

Payment options:

Category:

Sophos Firewall SKU: XA8BTCHEU

• Description
• Additional information

Description Scope of delivery Technical specifications Licensing Sizing Guide Services Resources Trial version Accessories Help with purchase

Description

Learn more about the Sophos XGS 87 Appliance

The XGS 87 is not able to support advanced features such as on-box reporting, dual scan engine scanning, WAF antivirus scanning, and message transfer agent (MTA) functionality. If you depend on these capabilities, we advise the XGS 107(w) or larger.

The XGS 87 belongs to the desktop variant of the XGS series. It has SFP for fiber connections and an integrated Ethernet interface. The devices in this range are perfect for small offices, small branch offices and retail stores.

The entire XGS series offers increased efficiency and performance. With the dedicated Xstream processor, data recognition is increased. In addition, the built-in and additional connection options facilitate subsequent adjustments to the infrastructure. The XGS 87 is equipped with TLS Inspection, Deep Packet Inspection and Application Acceleration to give you a powerful “See it. Stop it. Secure it” protection.

Scope of delivery

What is included in the scope of delivery?

Hardware

Sophos XGS 87 Firewall

Documents

Quick guide

Safety instructions

Accessories

Power supply

Micro USB cableRJ45 Ethernet cablePower cable

Licenses

Sophos base license

Technical specifications

Sophos XGS 87 Series

The Sophos XGS 87 is particularly suitable for small offices, small branch offices and retail stores.

Connections and extensions

Front

Back

Dimensions and weight

HEIGHT4.4 cm

WIDTH23.0 cm

DEEP20.55 cm

WEIGHT1.36 kg/3 lbs (unpacked) 2.75 kg/6.06 lbs (packed)

Manufacturer warranty and service

1 year warrantyWith the purchase of this Sophos Firewall you get 1 year warranty as standard. The term "Warranty" means Avanet's warranty and Sophos's manufacturer 's warranty. With an active Enhanced Support license, the warranty period can be extended up to 5 years.

3 SFOS updates included When purchasing Sophos Firewall without a license bundle, three SFOS firmware updates are included. To keep your Sophos Firewall up to date, an active Enhanced Support license is required. This can either be purchased separately with the firewall, or you can purchase the Sophos Firewall together with a license bundle that includes Enhanced Support.

90 days manufacturer supportIf Sophos Firewall is purchased without Enhanced Support or a license bundle, vendor support is limited to 90 days.

Included functions

Basic license The base license is included free with every Sophos Firewall and includes Xstream architecture, networking, wireless, SD-WAN, VPN and reporting. Read our detailed knowledge base article about the base license to find out if the free features are enough for you.

Central ManagementLink your firewall to Central, Sophos' advanced cloud-based platform. Enjoy convenient features like fast alerts, backup management, one-click firmware updates, and smooth deployment of new firewalls. Dive into the exciting world of Sophos Central and experience efficient management of your security solutions!

Central ReportingEnjoy free Central Reporting with up to 7 days of report data storage. You get access to robust reporting tools that let you visually map your network, Internet, and application activity and security over time.

Compare Desktop Firewalls

Performance

FIREWALL3,850 Mbps

TLS INSPECTION375 Mbps

FIREWALL IMIX3,000 Mbps

IPS1,200 Mbps

IPSEC VPN3,000 Mbps

NGFW700 Mbps

THREATPROTECTION280 Mbps

LATENCY(64 BYTE UDP)6 µs

CONCURRENT CONNECTIONS1.600.000

NEW CONNECTIONS/SEC35.700

CONCURRENT IPSEC-VPN-TUNNELS500

CONCURRENT SSL VPN TUNNEL500

XSTREAM SSL/TLS INSPECTION375 MBit/s

CONCURRENT CONNECTIONS XSTREAM SSL/TLS8.192

Understanding Sophos Firewall performance data correctly

Connectivity

STORAGE16 GB eMMC

ETHERNET INTERFACES (FIXED)4 x GbE copper1 x SFP fiber

POWER-OVER ETHERNET (FIXED)-

MANAGEMENT INTERFACES1 x COM RJ451 x Micro-USB (cable incl.)

OTHER I/O INTERFACES1 x USB 2.0 (front)1 x USB 3.0 (rear)

Modularity

OPTIONAL ADD-ON MODULESSFP transceiver

Operating conditions

POWER SUPPLYExternal, automatic range adjustment AC-DC 100-240 VAC, 1.7 A@50-60 Hz 12 VDC, 5 A, 60 W

POWER CONSUMPTION23.2 W / 79.16 BTU/hr (idle)43.4 W / 148.09 BTU/hr (max.)

OPERATING TEMPERATURE0°C to 40°C (operating)-20°C to +70°C (storage)

HUMIDITY10% to 90%, non-condensing

Product Certifications

CERTIFICATIONSCB, CE, UKCA, UL, FCC, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel, TEC

Licensing

Extend the range of functionality of the XGS 87

To increase the protection capabilities, you can also purchase the Sophos Firewall together with a license package. The following options are available:

Included free of charge

Base license

1 year warranty, 3 SFOS updates included, 90 Days manufacturer support with free base license.

Extend range of features

Standard Protection

Network Protection, Web Protection, Enhanced Support

Xstream Protection

Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Enhanced Support

Epic Protection

Network Protection Protection, Web Protection, Zero-Day Protection Protection, Central Orchestration, Email Protection, Web Server Protection, Enhanced Support

Base license

Each Sophos XGS Firewall Appliance purchased individually includes the free base license, which provides basic security features:

1 year warranty

3 SFOS updates included

90 days manufacturer support

Xstream Architecture

Networking

Wireless

SD-WAN

VPN and reporting

Base license

Xstream Architecture, Networking, Wireless, SD-WAN, VPN and Reporting.

Highly recommended buy for Enhanced SupportThere are situations where a Sophos Firewall with the minimum features of the base license is sufficient, and no additional modules are needed. Nevertheless, we recommend in any case the “Enhanced Support License” as an absolute minimum to benefit from unlimited software updates, round-the-clock support by Sophos and a warranty extension of up to 5 years.

Enhanced Support

24/7 support, feature updates, advance hardware replacement warranty during the term.

Standard Protection

The Standard Protection includes the following protection modules:

Network Protection

XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting

Web Protection

XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting

Enhanced Support

24/7 support, feature updates, advance hardware replacement warranty during the term.

The link below will take you directly to the Standard Protection product page, and you can learn more about the features it includes.

Standard Protection for XGS 87

Network Protection, Web Protection, Enhanced Support

Xstream Protection

The following protection modules are included in Xstream Protection:

Network Protection

XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting

Web Protection

XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting

Zero-Day Protection

Machine Learning and Sandboxing File Analysis, reporting

Central Orchestration

SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MDR/XDR Connector

Enhanced Support

24/7 support, feature updates, advance hardware replacement warranty during the term.

The link below will take you directly to the Xstream Protection product page to learn more about the features it includes.

Xstream Protection for XGS 87

Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Enhanced Support

Epic Protection

The following protection modules are included in Epic Protection:

Network Protection

XStream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED, reporting

Web Protection

XStream TLS and DPI Engine, Web Security and Web Control, Application Control, Reporting

Zero-Day Protection

Machine Learning and Sandboxing File Analysis, reporting

Central Orchestration

SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MDR/XDR Connector

Email Protection

On-box antispam, AV, DLP, encryption

Webserver Protection

Web Application Firewall

Enhanced Support

24/7 support, feature updates, advance hardware replacement warranty during the term.

The link below will take you directly to the Epic Protection product page, and you can learn more about the features it includes.

Epic Protection for XGS 87

Network Protection Protection, Web Protection, Zero-Day Protection Protection, Central Orchestration, Email Protection, Web Server Protection, Enhanced Support

Sizing Guide

Which firewall is right for you?

There are several factors to consider when choosing the right firewall model. It is important to make sure which firewall meets your requirement profile and offers sufficient performance and throughput before you buy. To ensure resilience, we would also advise using an HA cluster.

On this product page, we have gathered all the important data about XGS 87 Firewall that will help you make a decision.

Sophos Firewall Sizing Guide Compare 1U Firewalls

Avanet Services

Let us improve your safety

Our services are designed to help you keep your Sophos products running securely and reliably. In addition to the classic support for Sophos Firewalls or the Central platform, we offer the following services, which can be requested from us at any time:

Setup Services

Health Check

Upgrades

Workshops

Migrations

Firewall maintenance

SLA

Security audits

Request more information

Setup Services

Want to have your Sophos products set up by professionals? We support you during commissioning and configuration for smooth operation.

Migrations

You would like to change from your SG Firewall (UTM) to a XGS Firewall with the SFOS operating system? Thanks to our experience, we can also manage your changeover without any worries.

Health Check

You have set up your Sophos products yourself and would like us to check the configuration? We will check your settings and give our recommendation.

Workshops

Is it your job to be knowledgeable about Sophos products in your organization? We offer targeted training that is completely tailored to your needs.

Resources

Deepen your knowledge and learn more about the “Sophos XGS Firewall”

Sophos XGS Firewall – Datasheet

Sophos XGS Firewall – Brochure

Sophos Firewall – Solution Brief

Sophos Central Firewall – Datasheet

Next-Gen Firewall – Buyer's Guide

Cybersecurity System – Buyer's Guide

Sophos Central Firewall Reporting – Datasheet

Sophos Firewall and SD-WAN whitepaper

What’s New in Sophos Firewall – Beginner’s Guide

Firewall best Practice to block Ransomware – Whitepaper

Sophos XGS 87(w)/107(w) – Quick Start Guide

Sophos XGS 116(w)/126(w)/136(w) – Quick Start Guide

Sophos XGS 2100/2300/3100/3300 – Quick Start Guide

Sophos XGS 4300/4500 – Quick Start Guide

Sophos XGS 5500/6500 – Quick Start Guide

Sophos XGS 7500/8500 – Quick Start Guide

Sophos XGS 87(w)/107(w) – Operating Instructions

Sophos XGS 116(w)/126(w)/136(w) – Operating Instructions

Sophos XGS 2100/2300/3100/3300 – Operating Instructions

Sophos XGS 4300/4500 – Operating Instructions

Sophos XGS 5500/6500 – Operating Instructions

Sophos XGS 7500/8500 – Operating Instructions

EDUCATION & GOVERNMENT

Special awards for educational and government institutions

Sophos offers special discounts for schools and government institutions to meet specific budget requirements. A discount of at least 20 % can be expected.*

Ask us and we will prepare an offer for you completely free of charge and without obligation.

* Special pricing for educational and government institutions is only available in the DACH region.

Request special prices

Trial version

Try Sophos Firewall free

Familiarize yourself with the Sophos Firewall user interface before purchasing. See for yourself how intuitive this advanced operating system is and learn about all the features of Sophos Firewall.

Use the online demo for instant access directly in the browser, without installation. Or download the Sophos Firewall software for free (ISO) and install it on your own hardware.

Online demo Test free of charge

Use the following credentials to start your online demo. Username: demo / Password: XG@dem0user

Accessories

Often bought together

• Sophos Standard Protection for XGS 87 161,88 € - 852,00 € Select options
• Sophos Rackmount kit with adapter bracket for XGS 87(w)/107(w) 102,82 € Add to cart
• Sophos Power Supply for XGS 88/108 53,50 € Add to cart
• Sophos SD-RED 20 Appliance 377,88 € Add to cart
• Sophos SD-RED 60 Appliance 744,49 € Add to cart
• Sophos XGS 87 Enhanced Support 64,51 € - 417,60 € Select options
• Sophos Central Firewall Reporting Advanced 114,00 € - 342,00 € Select options

Help with purchase

Are there any questions about the product?

It is better to ask again before buying, before you end up holding the wrong product in your hands.

Ask question

Weight	2,72 kg
Dimensions	49 × 33 × 9 cm