Skip to product information
1 of 4


Sophos XGS 3100 Next-Gen Firewall with Standard Protection, 5-Year (US Power Cord)

Sophos XGS 3100 Next-Gen Firewall with Standard Protection, 5-Year (US Power Cord)

Regular price $26,026.73
Regular price Sale price $26,026.73
Sale Sold out
Shipping calculated at checkout.

Powerful Protection and Performance

Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection.

XGS 3100 Featured Specifications

Firewall Throughput: 38,000 Mbps
Firewall IMIX: 22,000 Mbps
IPS Throughput: 9,820 Mbps
Threat Protection Throughput:  2,000 Mbps
Ethernet interfaces (fixed): 8 x GE copper, 2 x SFP fiber*, 2 x SFP+ 10 GbE fiber* 
* Transceivers (mini GBICs) sold separately
Number of Flexi Port slots: 1

Protection Bundle Included: Standard Protection


Sophos Next-Generation Firewalls

Sophos XGS Series Appliances

All XGS Series firewall appliances are built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xstream Flow Processor for targeted acceleration at the hardware level. This gives you all the flexibility and adaptability of an x86 based firewall plus a significant performance boost over legacy firewall designs.

TLS 1.3 Inspection

According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organizations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience.

Sophos Firewall removes the blind spots caused by traffic by allowing you to use SSL inspection while maintaining performance efficiency.

Deep Packet Inspection

We believe you should never have to decide between security and performance. Sophos Firewall includes a highspeed deep packet inspection (DPI) engine to scan your traffic for threats without a proxy slowing down the process. The firewall stack can completely offload the processing to the DPI engine, significantly reducing latency and so improving overall efficiency. 

Sophos Firewall blocks the latest ransomware and breaches with high-performance streaming DPI including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

Application Acceleration

A significant portion of your network traffic is important business application traffic destined for branch offices, remote users, or cloud application servers. This trusted traffic, which needs no additional security scanning for threats or malware, can be intelligently directed to the FastPath, reducing latency, and optimizing overall performance. This provides added capacity and headroom for traffic that does need deep packet inspection.

Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies - putting them on 

Standard Protection Bundle Specifications

Standard Protection Bundle:

Base License

Networking, wireless, Xstream Architecture, unlimited Remote Access VPN, Site-to-Site VPN, reporting

Network Protection 

Xstream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED VPN, reporting

Web Protection 

Xstream TLS and DPI engine, Web Security and Control, Application Control, reporting

Enhanced Support 

24/7 support, feature updates, advanced replacement hardware warranty for term

XGS 3100 Detailed Specifications


XGS 3100

Firewall throughput

38,000 Mbps

Firewall IMIX

22,000 Mbps

Firewall Latency (64 byte UDP)

4 μs

IPS throughput

9,820 Mbps

Threat Protection throughput

2,000 Mbps


9,000 Mbps

Concurrent connections


New connections/sec


IPsec VPN throughput

5,200 Mbps

Xstream SSL/TLS Inspection

2,470 Mbps

Xstream SSL/TLS Concurrent connections



Physical interfaces

Storage (local quarantine/logs)

Integrated min. 240 GB SATA-III SSD

Ethernet interfaces (fixed)

8 x GE copper

2 x SFP fiber*

2 x SFP+ 10 GbE fiber*

Bypass port pairs


Management ports

1 x RJ45 MGMT

1 x COM RJ45

1 x Micro-USB (cable incl.)

Other I/O ports

2 x USB 3.0 (front)

1 x USB 2.0 (rear)

Number of Flexi Port slots


Flexi Port modules (optional)

8 port GbE copper

8 port GbE SFP fiber

4 port 10 GbE SFP+ fiber

4 port GbE copper bypass (2 pairs)

4 port GbE copper PoE + 4 port GbE copper

4 port 2.5 GbE copper PoE

2 port GbE Fiber (LC) bypass + 4 port GbE SFP Fiber

Max. total port density (incl. use of modules)


Max. Power-over-Ethernet (using Flexi Port module)

1 module: 4 ports, 60W max.

Optional add-on connectivity

SFP DSL module (VDSL2) SFP/SFP+ Transceivers


Multi-function LCD module

* Transceivers (mini GBICs) sold separately


Physical specifications


1U rackmount (2 rackmount ears included)


Width x Height x Depth

438 x 44 x 405 mm


4.7 kg/10.36 lbs (unpacked) 

7 kg/15.43 lbs (packed)



Power supply

Internal auto-ranging DC

100-240VAC, 3-6A@50-60 Hz

External Redundant PSU Option

Power consumption

3100: 50 W/170.77 BTU/hr (idle)

3300: 50 W/170.77 BTU/hr (idle)3100: 182 W/621.97 BTU/hr (max.)

3300: 201 W/686.68 BTU/hr (max.)

PoE addition enabled

76 W/260 BTU/hr (max.)

Operating temperature

0°C to 40°C (operating)-20°C to +70°C (storage)


10% to 90%, non-condensing


Product Certifications


KC, BSMI, RCM, NOM, Anatel


View full details
  • Free Shipping

    Most products ship with free standard shipping.

  • Can't find what you are looking for?

    CTResources has an extensive inventory of technology products from leading manufactures such as Sophos, Microsoft, Dell, and many others. If you don't see what your are looking for on this site, please email and we will do our best to quickly publish it to our online inventory for purchase.

    We can also accommodate custom orders, bulk orders, and tax exempt orders through our customer service as well.