Skip to product information
1 of 3


Sophos XGS 87 Next-Gen Firewall with Xstream Protection, 3-Year (US Power Cord)

Sophos XGS 87 Next-Gen Firewall with Xstream Protection, 3-Year (US Power Cord)

Regular price $1,513.64
Regular price Sale price $1,513.64
Sale Sold out
Shipping calculated at checkout.

Powerful Protection and Performance

Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection.

XGS 87 Featured Specifications

Firewall Throughput: 3,700 Mbps
Firewall IMIX: 2,500 Mbps
IPS Throughput: 1,015 Mbps
Threat Protection Throughput:  240 Mbps
Ethernet interfaces (fixed): 4 GbE copper, 1 x SFP fiber*
* SFP transceivers sold separately

Protection Bundle Included: Xstream Protection


Sophos Next-Generation Firewalls

Sophos XGS Series Appliances

All XGS Series firewall appliances are built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xstream Flow Processor for targeted acceleration at the hardware level. This gives you all the flexibility and adaptability of an x86 based firewall plus a significant performance boost over legacy firewall designs.

TLS 1.3 Inspection

According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organizations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience.

Sophos Firewall removes the blind spots caused by traffic by allowing you to use SSL inspection while maintaining performance efficiency.

Deep Packet Inspection

We believe you should never have to decide between security and performance. Sophos Firewall includes a highspeed deep packet inspection (DPI) engine to scan your traffic for threats without a proxy slowing down the process. The firewall stack can completely offload the processing to the DPI engine, significantly reducing latency and so improving overall efficiency. 

Sophos Firewall blocks the latest ransomware and breaches with high-performance streaming DPI including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

Application Acceleration

A significant portion of your network traffic is important business application traffic destined for branch offices, remote users, or cloud application servers. This trusted traffic, which needs no additional security scanning for threats or malware, can be intelligently directed to the FastPath, reducing latency, and optimizing overall performance. This provides added capacity and headroom for traffic that does need deep packet inspection.

Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies - putting them on 

Standard Protection Bundle Specifications

Xstream Protection Bundle:

Base License

Networking, Wireless, Xstream Architecture, Unlimited Remote Access VPN, Site-to-Site VPN, reporting

Network Protection 

Xstream TLS and DPI engine, IPS, ATP, Security Heartbeat, SD-RED VPN, reporting

Web Protection 

Xstream TLS and DPI engine, Web Security and Control, Application Control, reporting

Zero-Day Protection 

Machine Learning and Sandboxing File Analysis, reporting

Central Orchestration

SD-WAN VPN Orchestration, Central Firewall Advanced Reporting (30-days), MTR/XDR ready

Enhanced Support 

24/7 support, feature updates, advanced replacement hardware warranty for term


XGS 87 Detailed Specifications



XGS 87

Firewall throughput

3,700 Mbps

Firewall IMIX

2,500 Mbps

Firewall Latency (64 byte UDP) 

6 μs

IPS throughput

1,015 Mbps

Threat Protection throughput

240 Mbps


700 Mbps

Concurrent connections


New connections/sec


IPsec VPN throughput

750 Mbps

Xstream SSL/TLS Inspection

375 Mbps

Xstream SSL/TLS Concurrent connections



Physical interfaces


16 GB eMMC

Ethernet interfaces (fixed)

4 x GbE copper

1 x SFP fiber*

* SFP transceivers sold separately

Management ports

1 x COM RJ45

1 x Micro-USB (cable incl.)

Other I/O ports

1 x USB 2.0 (front)

1 x USB 3.0 (rear)

Number of expansion slots


Optional add-on connectivity

SFP DSL module (VDSL2)

SFP transceivers


Physical specifications


Rackmount kit available (to be ordered separately)


Width x Height x Depth

230 x 44 x 205.5 mm


1.36 kg/3 lbs (unpacked)

2.75 kg/6.06 lbs (packed)

(w-model minimally more)



Power supply

External auto-ranging AC-DC

100-240VAC, 1.7A@50-60 Hz

12VDC, 5A, 60W

Power consumption

23.2 W / 79.16 BTU/hr (87) (idle)

27.1 W / 92.13 BTU/hr (87w) (idle)

43.4 W / 148.09 BTU/hr (87) (max.)

46.8 W / 159.69 BTU/hr (87w) (max.)

Operating temperature

0°C to 40°C (operating)

-20°C to +70°C (storage)


10% to 90%, non-condensing


Product Certifications


CB, CE, UL, FCC, ISED, VCCI, CCC, KC, BSMI, NOM, Anatel (87 only)

View full details
  • Free Shipping

    Most products ship with free standard shipping.

  • Can't find what you are looking for?

    CTResources has an extensive inventory of technology products from leading manufactures such as Sophos, Microsoft, Dell, and many others. If you don't see what your are looking for on this site, please email and we will do our best to quickly publish it to our online inventory for purchase.

    We can also accommodate custom orders, bulk orders, and tax exempt orders through our customer service as well.