Sophos · Firewalls
Sophos XGS 2100
Rackmount entry point for organizing enterprise network controls.
Overview
The XGS 2100 uses a 1U rack form factor and provides 8 × 1 GbE + 2 SFP as fixed network interfaces. Consider it as a rackmount entry point when local segments primarily use Gigabit and expansion can be handled by a single slot. The port configuration changes when a module is installed; confirm the required module before considering maximum density. The specification must distinguish integrated ports, optional modules and transceivers, and define licensing and continuity requirements.
Key features
- 8 × 1 GbE + 2 SFPModel feature verified on the family’s official technical page.
- One Flexi Port slotModel feature verified on the family’s official technical page.
- Optional second external power supplyModel feature verified on the family’s official technical page.
- Selection criterionConsider it as a rackmount entry point when local segments primarily use Gigabit and expansion can be handled by a single slot.
- Design conditionThe port configuration changes when a module is installed; confirm the required module before considering maximum density.
Technical specifications
| Firewall throughput | 30 GbpsHTTP traffic with 512 KB response size. |
|---|---|
| Firewall IMIX | 16.5 GbpsUDP mix of 66, 570 and 1518 byte packets. |
| Firewall latency (64-byte UDP) | 6 microsecondsMaximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPS throughput | 6 GbpsIPS enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Threat protection | 5 GbpsFirewall, IPS, application control and malware prevention enabled using Enterprise Mix traffic. |
| NGFW throughput | 5 GbpsIPS and application control enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Concurrent connections | 6,500,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| New connections per second | 134,700Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPsec VPN throughput | 17 GbpsHTTP throughput using multiple tunnels and 512 KB response size. |
| Concurrent IPsec tunnels | 5,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Concurrent SSL VPN tunnels | 2,500Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Xstream SSL/TLS inspection | 1.1 GbpsIPS enabled on HTTPS sessions with different cipher suites. |
| Concurrent SSL/TLS connections | 18,432Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Local storage | Integrated minimum 120 GB SATA-III SSDNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
|---|---|
| Fixed Ethernet interfaces | 8 × GE copper; 2 × SFP fiberNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum port density | 18Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Idle power consumption | 43 W / 146.86 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum power consumption | 162 W / 533.5 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Form factor and mounting | 1U rackmount; two rack ears includedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Dimensions | 438 × 44 × 405 mmNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Weight | 4.7 kg unpacked; 7 kg packedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Power supply | Internal auto-ranging AC-DC, 100–240 VAC, 3–6 A at 50–60 Hz; optional external redundant PSUNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Operating temperature | 0°C to 40°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Storage temperature | -20°C to +70°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Humidity | 10% to 90%, non-condensingNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Management ports | 1 × RJ45 MGMT; 1 × COM RJ45; 1 × Micro-USB (cable included)Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Other I/O ports | 2 × USB 3.0 front; 1 × USB 2.0 rearNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Bypass pairs | 1Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Flexi Port slots | 1Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional Flexi Port modules | 8-port GE copper; 8-port GE SFP; 4-port 10 GE SFP+; 4-port GE copper bypass; 4-port GE copper PoE + 4-port GE copper; 2-port 10 GE NBASE-T + 2-port 10 GE SFP+; 2-port GE fiber LC bypass + 4-port GE SFPNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum PoE via Flexi Port | One Flexi Port module: 4 ports, 60 W maximumNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional connectivity | SFP DSL module (VDSL2); SFP/SFP+ transceivers; transceivers sold separatelyNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Display | Multi-function LCD moduleNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPINominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.