Skip to content

HomeFirewalls / Sophos / Sophos XGS Rackmount Series

Sophos XGS 6500

Choose from the available models below. By default the first in stock option is shown.

Price:

$44,170.18

SKU: XG6ETCHAU

If you can't find the item you are after in stock, please chat to us.  Supply chain issues mean these are often ordered directly from Sophos for each customer with a lead time of around 14 days.


Chat 7am to 10pm - 7 days a week

We love what we do!

Shipping Costs From

Standard - $15 or Express - $20

Want The Best Prices?

Request a quote


Hardware Firewall with 10-GbE-SFP+ for large datacenters and service providers.

 

Powerful Protection & Performance
Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection. The Sophos Firewall Xstream architecture is engineered to deliver extreme levels of visibility, protection, and performance to help address some of the greatest challenges facing network administrators today.

 

TLS 1.3 Inspection
According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organizations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience.

Sophos Firewall removes the blind spots caused by encrypted traffic by allowing you to use SSL inspection while maintaining performance efficiency.

 

Application Acceleration
A significant portion of your network traffic is important business application traffic destined for branch offices, remote users, or cloud application servers. This trusted traffic, which needs no additional security scanning for threats or malware, can be intelligently directed to the FastPath, reducing latency, and optimizing overall performance. This provides added capacity and headroom for traffic that does need deep packet inspection.

Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies - putting them on the FastPath through the new Xstream Flow Processors.

 

Deep Packet Inspection
We believe you should never have to decide between security and performance. Sophos Firewall includes a highspeed deep packet inspection (DPI) engine to scan your traffic for threats without a proxy slowing down the process.

The firewall stack can completely offload the processing to the DPI engine, significantly reducing latency and so improving overall efficiency. Sophos Firewall blocks the latest ransomware and breaches with high-performance streaming DPI including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

 

Features:


For networks in the range of more than 1,000 users/devices
9x 1-GbE-RJ45, 12x 10-GbE-SFP+
115 Gbps Firewall Throughput
17.1 Gbps Threat Protection Throughput
480 GB (2x SATA-III SSD HW-RAID) Storage

 

The purchase price of your Sophos XGS 6500 Firewall includes a perpetual base license. This includes basic firewall features such as IPSec VPN, SSL VPN, full wireless protection and cloud-based management and reporting with Sophos Central. Add individual protection modules and support depending on your requirements, or choose one of Sophos's license value bundles "Standard Protection Bundle" or "Xstream Protection Bundle".

  • Datasheets and Guides

Click HERE to access the Datasheet

Click HERE to access the Installation Guide


subscriptions & accessories

Sophos Parts & Accessories


  • Which Model?
  • Which Subscription?
  • More protection?
  • Thinking  Wireless?

The Sophos Rackmount Series is currently made up of 8 models.  These are ideal for midsize and enterprise organizations looking for a rackmount form factor, strong throughput and enterprise-grade security.  The table below highlights the main features of each model.


Options

Power over Ethernet

XGS 2100 / 2300 / 3100 / 3300 (1 x Optional Module - 4 x 1 GbE Max 60W Per Port)

XGS 4300 / 4500 (2 x Optional Module - 4 x 1 GbE Max 60W Per Port)

Storage

XGS 2100 / 2300 (128 GB SSD), XGS 3100 / 3300 (240 GB SSD)

XGS 4300 (240 GB SSD), XGS 4500 (2 x 240 GB SSD - Software RAID 1)

XGS 5500 / 6500 (2 x 480 GB SSD - Hardware RAID 1 Built In To CPU)

Redundant Power Supply

XGS 2100 / 2300 / 3100 / 3300 / 4300 (Optional External Redundant PSU)

XGS 4500 (Optional Internal Redundant PSU)
XGS 5500 / 6500 (2 x Internal Redundant PSU As Standard)

Throughput

Firewall Inspection

XGS 2100 (3 Gbps), XGS 2300 (3.5 Gbps), XGS 3100 (3.8 Gbps), XGS 3300 (40 Gbps)

XGS 4300 (75 Gbps), XGS 4500 (80 Gbps), XGS 5500 (100 Gbps), XGS 6500 (115 Gbps)

Threat Prevention

XGS 2100 (1.25 Gbps), XGS 2300 (1.4 Gbps), XGS 3100 (2 Gbps), XGS 3300 (2.7 Gbps)

XGS 4300 (4.8 Gbps), XGS 4500 (8.39 Gbps), XGS 5500 (12.39 Gbps), XGS 6500 (17.05 Gbps)

Firewall IMIX

XGS 2100 (15.9 Gbps), XGS 2300 (20 Gbps), XGS 3100 (22 Gbps), XGS 3300 (24.5 Gbps)

XGS 4300 (33 Gbps), XGS 4500 (37 Gbps), XGS 5500 (52 Gbps), XGS 6500 (60 Gbps)

Intrusion Prevention

XGS 2100 (5.8 Gbps), XGS 2300 (7 Gbps), XGS 3100 (9.82 Gbps), XGS 3300 (13.44 Gbps)

XGS 4300 (25 Gbps), XGS 4500 (35.69 Gbps), XGS 5500 (40 Gbps), XGS 6500 (48 Gbps)

NGFW

XGS 2100 (5.2 Gbps), XGS 2300 (6.3 Gbps), XGS 3100 (9 Gbps), XGS 3300 (12.5 Gbps)

XGS 4300 (23 Gbps), XGS 4500 (30 Gbps), XGS 5500 (38 Gbps), XGS 6500 (46.5 Gbps)

SSL / TLS Inspection

XGS 2100 (1.1 Gbps), XGS 2300 (1.45 Gbps), XGS 3100 (2.47 Gbps), XGS 3300 (3.13 Gbps)

XGS 4300 (8 Gbps), XGS 4500 (10.6 Gbps), XGS 5500 (13.5 Gbps), XGS 6500 (16 Gbps)

IPSec VPN Throughput

XGS 2100 (12 Gbps), XGS 2300 (15 Gbps), XGS 3100 (17 Gbps), XGS 3300 (21 Gbps)

XGS 4300 (51 Gbps), XGS 4500 (62 Gbps), XGS 5500 (78 Gbps), XGS 6500 (97 Gbps)

capacity

Interfaces

XGS 2100 / 2300 (8x 1GbE + 2 x SFP), XGS 3100 / 3300 (8 x 1GbE, 2 x SFP, 2 x SFP+)
XGS 4300 / 4500 (4 x 1GbE, 4 x 2.5GbE, 4 x SFP+)

XGS 5500 (8x 1GbE + 8 x SFP+), XGS 6500 (8 x 1GbE + 12 x SFP+)

Bypass Port Pairs

XGS 2100 / 2300 / 3100 / 3300 (1)
XGS 4300 / 4500 / 5500 / 6500 (2)

Flex Port Module Slots

XGS 2100 / 2300 / 3100 / 3300 (1)
XGS 4300 / 4500 (2) XGS 5500 / 6500 (2 + 1 High Density Module)

Optional Add-On Connectivity

All Models - SFP DSL Module VDSL2

Optional Flexi Port Modules
XGS 2100 - 4500

8 port GbE copper, 8 port GbE SFP fiber, 4 port 10GE SFP+ fiber, 4 port GbE copper bypass (2 pairs), 4 port GbE copper PoE +, 4 port GbE copper, 4 port 2.5 GbE copper PoE, 2 port GbE Fiber (LC) bypass + 4 port GbE SFP Fiber

Optional Flexi Port Modules
XGS 5500 - 6500

8 port GbE copper, 8 port GbE SFP fiber, 4 port 10 GbE SFP+ fiber, 4 port GbE copper bypass (2 pairs), 2 port 40 GbE QSFP+ fiber, 8 port 10 GbE SFP+ fiber, 2 port GbE Fiber (LC) bypass + 4 port GbE SFP Fiber, 2 port 10 GbE Fiber (LC) bypass + 4 port 10 GbE SFP+ Fiber, High-density module (NIC): 12 port GE copper + 4 port 2.5 GE copper

Max Total Port Density (inc use of modules)

XGS 2100 / 2300 (18), XGS 3100 / 3300 (20), XGS 4300 / 4500 (28)
XGS 5500 (48), XGS 6500 (68)

VPN Tunnels & Licenses

SSL VPN Concurrent Tunnels

XGS 2100 / 2300 (2500),  XGS 3100 / 3300 (5000),  XGS 4300 (7500)

XGS 4500 (10000), XGS 5500 / 6500 (15000)

Our Serving suggestion

Internet Speed

< 1000 Mbps
XGS 2100 / 2300

<  1500 Mbps
XGS 3100 / 3300

< 5000 Mbps
XGS 4300 / 4500

Muliti Gbps
XGS 5500 / 6500

Number of Users

< 100

< 200

< 1000

1000's

Paul's Quick Tip

So here's my quick tip for selecting a Sophos Rackmount Series firewall to meet your needs.  Having sold and managed literally thousands of firewalls across the world since I started in 1999, I have noticed one thing - Our browsing and data consuming habits effect a firewall's throughput.  All the tests above were performed in labs and under controlled conditions.  


I would always recommend taking the slowest speed published - in this instance something like the Threat Protection value and then dividing it by three.   This will give you, from our experience, the worst speed you will get under the heaviest load conditions, with full protection turned on.   Make sure this speed is faster than your internet connection and you will be good to go.


Example using a Sophos XGS 2100

Threat Protection speed is 1250 Mbps, divide this by 3 which gives you 416 Mbps.  This is the slowest we believe this firewall will run under the heaviest of loads.  Obviously if you want to turn some of the security services off, then you will make it run faster.


The Tech Geeks - Paul Sillars

Gio's Advice

Your firewall is nothing without a live and updating subscription.  Viruses, Malware and network threats, change almost hourly.  Purchasing a security subscription means that your firewall will always be receiving the latest threat signatures, virus protection updates and filter block lists.


The best bit is that an active security subscription also gives you free firmware updates, technical support from Sophos and hardware warranty for the duration of the subscription.


Never view a security subscription like the warranty for a car.   It is not there just in case something goes wrong, it is actually needed to make sure nothing goes wrong.  You are only truly being protected if your firewall is auto updating and has an active subscription.


Base License

Every Sophos XG/XGS firewall comes with a base license as standard.  This gives you the basic features to get going, but no ongoing updates or support.

standard protection

The Standard Protection Bundle provides all

essential security services needed to protect against known, as well as firmware updates, hardware warranty and 24x7 support

Xstream protection

The Xstream Protection Bundle builds on the features available in Standard, but adds in protection against unknown threat, often called Zero-Day, along with advanced SD-WAN capabilities and an extended reporting period.

base

standard

xstream

24x7 Enhanced Support

24/7 support, advanced replacement hardware warranty for the term of the subscription.