Sophos · Firewalls
Sophos XGS 2300
Rackmount firewall for sites with growing traffic and VPN requirements.
Overview
The XGS 2300 uses a 1U rack form factor and provides 8 × 1 GbE + 2 SFP as fixed network interfaces. Compare it with the XGS 2100 when the same basic interfaces meet the network requirements but the traffic profile calls for more processing headroom. Treat threat protection, TLS and VPN as separate metrics; the same number of ports does not imply equivalent capacity. The specification must distinguish integrated ports, optional modules and transceivers, and define licensing and continuity requirements.
Key features
- 8 × 1 GbE + 2 SFPModel feature verified on the family’s official technical page.
- One Flexi Port slotModel feature verified on the family’s official technical page.
- Optional second external power supplyModel feature verified on the family’s official technical page.
- Selection criterionCompare it with the XGS 2100 when the same basic interfaces meet the network requirements but the traffic profile calls for more processing headroom.
- Design conditionTreat threat protection, TLS and VPN as separate metrics; the same number of ports does not imply equivalent capacity.
Technical specifications
| Firewall throughput | 39 GbpsHTTP traffic with 512 KB response size. |
|---|---|
| Firewall IMIX | 20 GbpsUDP mix of 66, 570 and 1518 byte packets. |
| Firewall latency (64-byte UDP) | 4 microsecondsMaximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPS throughput | 7 GbpsIPS enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Threat protection | 5.5 GbpsFirewall, IPS, application control and malware prevention enabled using Enterprise Mix traffic. |
| NGFW throughput | 6.3 GbpsIPS and application control enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Concurrent connections | 6,500,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| New connections per second | 148,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPsec VPN throughput | 20.5 GbpsHTTP throughput using multiple tunnels and 512 KB response size. |
| Concurrent IPsec tunnels | 5,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Concurrent SSL VPN tunnels | 2,500Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Xstream SSL/TLS inspection | 1.45 GbpsIPS enabled on HTTPS sessions with different cipher suites. |
| Concurrent SSL/TLS connections | 18,432Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Local storage | Integrated minimum 120 GB SATA-III SSDNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
|---|---|
| Fixed Ethernet interfaces | 8 × GE copper; 2 × SFP fiberNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum port density | 18Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Idle power consumption | 45 W / 153.7 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum power consumption | 167 W / 570.74 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Form factor and mounting | 1U rackmount; two rack ears includedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Dimensions | 438 × 44 × 405 mmNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Weight | 4.7 kg unpacked; 7 kg packedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Power supply | Internal auto-ranging AC-DC, 100–240 VAC, 3–6 A at 50–60 Hz; optional external redundant PSUNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Operating temperature | 0°C to 40°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Storage temperature | -20°C to +70°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Humidity | 10% to 90%, non-condensingNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Management ports | 1 × RJ45 MGMT; 1 × COM RJ45; 1 × Micro-USB (cable included)Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Other I/O ports | 2 × USB 3.0 front; 1 × USB 2.0 rearNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Bypass pairs | 1Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Flexi Port slots | 1Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional Flexi Port modules | 8-port GE copper; 8-port GE SFP; 4-port 10 GE SFP+; 4-port GE copper bypass; 4-port GE copper PoE + 4-port GE copper; 2-port 10 GE NBASE-T + 2-port 10 GE SFP+; 2-port GE fiber LC bypass + 4-port GE SFPNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum PoE via Flexi Port | One Flexi Port module: 4 ports, 60 W maximumNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional connectivity | SFP DSL module (VDSL2); SFP/SFP+ transceivers; transceivers sold separatelyNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Display | Multi-function LCD moduleNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPINominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.