Sophos XGS 3100 Security Appliance
Original price was: KSh 800,000.00.KSh 760,000.00Current price is: KSh 760,000.00. Excl. VAT
- Firewall Throughput: 47 Gbps
- IPS Throughput: 10.5 Gbps
- IPsec VPN Throughput: 25 Gbps
- NGFW Throughput: 9 Gbps
- Threat Protection Throughput: 7.4 Gbps
- TLS Inspection Throughput: 2.47 Gbps
- Concurrent Connections: 12,260,000
- New Connections per Second: 148,000
Sophos XGS 3100
Unleash the full potential of your network
Overview:
Powerful Protection and Performance
The Sophos Firewall Xstream architecture is engineered to deliver extreme levels of visibility, protection, and performance to help address some of the greatest challenges facing network administrators today.
Sophos XGS 3100 Next-Gen Firewall Security Appliance
Sophos XGS 3100 Security Appliance
Elite-tier threat protection for 500–750 users, with dual-processor Xstream architecture that stops zero-day ransomware without throttling your network.
Why IT Leaders & Procurement Choose the XGS 3100
Performance Uncompromised
A dedicated multi-core CPU plus a hardware-accelerated Xstream Flow Processor offloads trusted traffic, freeing the main processor for deep security scanning and full TLS 1.3 inspection.
True Modular Longevity
Built-in 10 GbE SFP+ fiber ports plus a flexible FleXi Port slot let you swap network modules as bandwidth scales — no need to replace the whole appliance.
Set-and-Forget Security
Paired with Sophos Intercept X, Synchronized Security (Heartbeat) auto-isolates a compromised device the instant it's flagged, halting ransomware before it spreads.
Hardware Specifications
| Metric | Value |
|---|---|
| Firewall Throughput | 47 Gbps |
| IPS Throughput | 10.5 Gbps |
| IPsec VPN Throughput | 25 Gbps |
| NGFW Throughput | 9 Gbps |
| Threat Protection Throughput | 7.4 Gbps |
| TLS Inspection Throughput | 2.47 Gbps |
| Concurrent Connections | 12,260,000 |
| New Connections per Second | 148,000 |
Flexible Connectivity & Modularity
| Interface Type | Fixed Built-in Ports | Expansion Module Options (FleXi Port Slot) |
|---|---|---|
| Copper | 8 x GE Copper | 8-port GE Copper / 4-port GE Bypass / 2-port 10 GE NBASE-T |
| Fiber | 2 x SFP Fiber / 2 x SFP+ 10 GbE | 8-port GE SFP / 4-port 10 GE SFP+ |
| Management | 1 x RJ45 MGMT / 1 x COM RJ45 / 1 x Micro-USB | — |
| Storage & USB | 2 x USB 3.0 (Front) / 1 x USB 2.0 (Rear) | Integrated 120 GB SATA-III SSD |
Sophos XGS Series Appliances
All XGS Series firewall appliances are built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xstream Flow Processor for targeted acceleration at the hardware level. This gives you all the flexibility and adaptability of an x86 based firewall plus a significant performance boost over legacy firewall designs.
| Model | Tech Specs | Throughput | ||||||
|---|---|---|---|---|---|---|---|---|
| Form Factor | Slots (Max Ports) |
w-model* | Swappable Components | Firewall (Mbps) |
IPsec VPN (Mbps) |
Threat Protection (Mbps) |
Xstream SSL/TLS (Mbps) |
|
| XGS 87(w) | Desktop | 5/– (5) | Wi-Fi 5 | n/a | 3,850 | 3,000 | 280 | 375 |
| XGS 88(w) | Gen.2 Desktop | 4/– (4) | Wi-Fi 6 | n/a | 9,900 | 6,000 | 2,000 | 600 |
| XGS 107(w) | Desktop | 9/– (9) | Wi-Fi 5 | Second power supply | 7,000 | 4,000 | 370 | 420 |
| XGS 108(w) | Gen.2 Desktop | 7/– (7) | Wi-Fi 6 | Optional: 2nd power supply, 5G module | 12,500 | 8,250 | 2,500 | 800 |
| XGS 116(w) | Desktop | 9/1 (9) | Wi-Fi 5 | 2nd power supply, 3G/4G, 5G, Wi-Fi** | 7,700 | 4,800 | 720 | 650 |
| XGS 118(w) | Gen.2 Desktop | 10/1 (10) | Wi-Fi 6 | Optional: 2nd power supply, 5G module | 15,500 | 13,000 | 3,250 | 1,100 |
| XGS 126(w) | Desktop | 14/1 (14) | Wi-Fi 5 | 2nd power supply, 3G/4G, 5G, Wi-Fi** | 10,500 | 5,500 | 900 | 800 |
| XGS 128(w) | Gen.2 Desktop | 10/1 (10) | Wi-Fi 6 | Optional: 2nd power supply, 5G module | 19,100 | 15,050 | 4,000 | 1,450 |
| XGS 136(w) | Desktop | 14/1 (14) | Wi-Fi 5 | 2nd power supply, 3G/4G, 5G, Wi-Fi** | 11,500 | 6,350 | 1,000 | 950 |
| XGS 138 | Gen.2 Desktop | 8/1 (8) | n/a | Optional: 2nd power supply, 5G module | 19,100 | 6,600 | 4,750 | 1,700 |
| XGS 2100 | 1U | 10/1 (18) | n/a | Optional external power | 30,000 | 17,000 | 1,250 | 1,100 |
| XGS 2300 | 1U | 10/1 (18) | n/a | Optional external power | 39,000 | 20,500 | 1,500 | 1,450 |
| XGS 3100 | 1U | 12/1 (20) | n/a | Optional external power | 47,000 | 25,000 | 2,000 | 2,470 |
| XGS 3300 | 1U | 12/1 (20) | n/a | Optional external power | 58,000 | 31,100 | 3,000 | 3,130 |
| XGS 4300 | 1U | 12/2 (28) | n/a | Optional external power | 75,000 | 62,500 | 6,500 | 8,000 |
| XGS 4500 | 1U | 12/2 (28) | n/a | Optional external power | 80,000 | 75,550 | 8,650 | 10,600 |
| XGS 5500 | 2U | 16/3 (48) | n/a | Power, SSD, Fan | 100,000 | 92,500 | 14,000 | 13,500 |
| XGS 6500 | 2U | 20/4 (68) | n/a | Power, SSD, Fan | 120,000 | 109,800 | 17,850 | 16,000 |
| XGS 7500 | 2U | 22/4 (70) | n/a | Power, SSD, Fan | 160,000 | 117,000 | 26,000 | 19,500 |
| XGS 8500 | 2U | 22/4 (70) | n/a | Power, SSD, Fan | 190,000 | 117,000 | 34,000 | 24,000 |
* w-model = Wi-Fi variant available. ** Requires optional module. XGS 3100 row highlighted — the model featured on this page.
Choose Your Licensing Bundle
Base License
Baseline stateful firewall routing, wireless controller capabilities, basic IPsec/SSL VPN routing, and 7-day local reporting.
Standard Protection
Base License plus Network Protection (Next-Gen IPS, Advanced Threat Protection) and Web Protection (filtering, application control).
Xstream Protection
The complete deployment: AI-driven Zero-Day sandboxing, high-speed TLS 1.3 inspection, and Central Orchestration for SD-WAN and VPN management.
Licensing and Deployment
We recommend the Xstream Protection bundle for the ultimate in security, but if you prefer to customize your protection, all subscriptions are also available for individual purchase.
Xstream Protection Bundle
| Component | Includes |
|---|---|
| Base License | Networking, wireless, Xstream Architecture, unlimited remote access VPN, site-to-site VPN, reporting |
| Network Protection | Xstream TLS and DPI engine, IPS, ATP, Security Heartbeat, manage SD-RED, reporting |
| Web Protection | Xstream TLS and DPI engine, Web Security and Control, Application Control, reporting |
| Zero-Day Protection | Machine Learning and Sandboxing File Analysis, reporting |
| Orchestration | SD-WAN VPN Orchestration, Firewall Advanced Reporting (30-days), MDR/XDR Connector |
| Enhanced Support | 24/7 support, feature updates, advanced replacement hardware warranty for term |
Custom Protection
You can choose the Standard Protection Bundle or purchase any of the protection modules separately.
Standard Protection Bundle
| Component | Includes |
|---|---|
| Base License | Networking, wireless, Xstream Architecture, Xstream SD-WAN, unlimited remote access VPN, site-to-site VPN |
| Network Protection | Xstream TLS and DPI engine, IPS, ATP, Security Heartbeat, manage SD-RED, reporting |
| Web Protection | Xstream TLS and DPI engine, Web Security and Control, Application Control, reporting |
| Enhanced Support | 24/7 support, feature updates, advanced replacement hardware warranty for term |
Additional Protection Modules
| Module | Includes |
|---|---|
| Email Protection | On-box antispam, AV, DLP, encryption |
| Web Server Protection | Web Application Firewall |
Sophos Fusion Management and Reporting (included at no charge)
| Service | Includes |
|---|---|
| Sophos Fusion Management | Group firewall management, backup management, firmware update scheduling |
| Sophos Firewall Reporting | Prepackaged and custom report tools with seven days cloud storage for no extra charge |
Additional Protection Services, Products and Modules
| Service / Product | Includes |
|---|---|
| Managed Detection and Response | 24/7 threat hunting, detection and response delivered by an expert team |
| Sophos Intercept X Endpoint with XDR | Sophos Fusion managed next-gen endpoint protection with EDR |
| ZTNA | Sophos Fusion managed Zero Trust Network Access |
| Sophos Email | Sophos Fusion managed antispam, AV, DLP, encryption |
| Sophos Switch | Cloud-managed switches |
Support
A support subscription is required to receive firmware upgrades. Enhanced support is included in all protection bundles, but you can enhance your support experience further by upgrading.
Additional Support Options
| Option | Includes |
|---|---|
| Enhanced Plus Support Upgrade | Upgrade your support with VIP support, HW warranty for add-ons, TAM option |
Cloud, Virtual and Software Appliance Licensing Options
If you're deploying Sophos Firewall in the cloud, in a virtual environment, or as software on your own hardware, the licensing guide below can help you find the right option.
| Model | Equivalent AWS Instance | Equivalent Azure VM | Software/Virtual License* |
|---|---|---|---|
| XGS 87(w) | t3.medium | – | 2C4 |
| XGS 107(w) | c5.large | Standard_F2s_v2 | – |
| XGS 116(w) | – | – | 4C6 |
| XGS 2100 | c5.xlarge | – | – |
| XGS 2300 | m5.xlarge | Standard_F4s_v2 | 6C8 |
| XGS 3100 | c5.2xlarge | Standard_F8s_v2 | 8C16 |
| XGS 4300 | c5.4xlarge | Standard_F16s_v2 | 16C24 |
| XGS 5500 | c5.9xlarge | Standard_F32s_v2 | Unlimited |
* Based upon CPU cores and RAM
Why Customers Prefer Patchtech Solutions
Certified Security Engineering
Sophos-certified engineers handle baseline configuration, firewall rules architecture, and SD-WAN staging.
Strategic Procurement & Fast Fulfillment
Dedicated inventory pipelines and competitive 1-, 3-, and 5-year licensing discounts.
Seamless Migration Services
Error-free migration from Sophos SG/XG, Fortinet, or Palo Alto, with minimal downtime.
Lifetime Lifecycle Support
A direct tier-1 technical touchpoint from provisioning through hardware replacement.
Shipping & Delivery
We aim to get your order to you as quickly as possible!
Processing Time: Orders are processed within 1 business days after payment confirmation.
Delivery Time:
Local deliveries: 1 business day (Same Day delivery)
International deliveries: 1–7 business days (depending on location)
Shipping Partners: We work with reliable couriers such as Fargo Courier, Matatu Couriers and local pickup services.
Tracking: Once your order ships, you’ll receive a tracking number via email or SMS. You can also check your order status anytime through your account dashboard.
Shipping Costs: Calculated at checkout based on your location and order weight. Free pickups at the store.
💡 Note: Delivery times may vary slightly during holidays or promotional periods.
Related products
Kaspersky Standard Antivirus 1 User License
Microsoft Power BI Premium Per User
Microsoft 365 Business Premium
SQL Server 2022 Standard Edition
Windows Server 2022 RDS User CAL
Sophos Endpoint 100 [EP100-SVR] 36 Months
Sophos XGS 2100 Firewall Appliance – Next-Gen Network Security
