Sophos XGS 128 Firewall – Gen 2 Desktop with XStream Protection

The Sophos XGS 128 is a high-performance desktop next-generation firewall built for Egyptian businesses that demand robust connectivity and serious throughput without moving to a rackmount. With 8× GE copper ports, 4× SFP uplinks, and 55 Gbps firewall throughput, it is the preferred choice for businesses with 50–100 users or multi-segment networks requiring a DMZ zone.

Key Specifications

Ideal Use Cases

• Growing SMBs (50–100 users): Handles the throughput demands of a busy office with full threat inspection active — no compromises on security or speed.
• Multi-Zone Network Segmentation: 4× SFP ports enable dedicated DMZ, guest Wi-Fi, server, and WAN segments for a properly segmented network architecture.
• Egypt Multi-Branch Networks: With SD-WAN and Sophos Central, deploy consistent security across all branch offices managed from a single cloud console.
• Manufacturing & Industrial Sites: Reliable fanless operation in environments where rack space is limited and airflow management is challenging.

Why Buy from Da3m?

• Sophos Gold Partner — Egypt’s authorized premium Sophos reseller
• Network Design Support — Da3m engineers help design your segmentation and VPN topology
• Competitive Pricing in EGP — transparent pricing with no hidden import fees
• On-Site Deployment — Da3m teams deploy across Alexandria, Cairo, and major Egyptian cities
• Multi-Year License Flexibility — choose 1-year or 3-year Standard or XStream Protection

Frequently Asked Questions

How does the XGS 128 compare to the XGS 118?

The XGS 128 doubles the SFP ports (4 vs 2), significantly increases throughput (55 Gbps vs 31 Gbps firewall, 8.9 Gbps vs 5 Gbps threat protection), and adds 32 GB SSD storage vs 16 GB eMMC. It is the right choice when you expect network growth or need multiple fiber uplinks.

Can the XGS 128 support a DMZ for public-facing servers?

Yes. The XGS 128 supports full network segmentation with dedicated DMZ zones. You can assign SFP or copper ports to a DMZ segment and apply specific firewall rules, IPS policies, and web application firewall protection for public-facing servers.

Is the XGS 128 compatible with SD-WAN for dual-ISP failover?

Yes. Sophos XGS firewalls include full SD-WAN capabilities including dual-ISP failover, performance-based routing, and link load balancing — ensuring business continuity even if one ISP goes down.

What is the recommended license for a 75-user office?

For most Egyptian SMBs, XStream Protection (3-year) provides the best value — zero-day threat protection, sandboxing, DNS protection, and Sophos Central management are all included. Da3m’s pre-sales team can provide a detailed comparison and cost breakdown.

Does Da3m provide firewall configuration training?

Yes. Da3m offers Sophos firewall training for IT administrators, covering initial setup, firewall rules, VPN configuration, Sophos Central integration, and reporting. Contact us for training packages.