Talk to a specialist
Sophos · Firewalls

Sophos XGS 3100

1U firewall with integrated 10 GbE interfaces for enterprise networks.

Category
Firewalls
Family
1U rack-mount XGS
Talk to a specialist about this productSee all products
XGS-3100 — front and rear views

Overview

The XGS 3100 uses a 1U rack form factor and provides 8 × 1 GbE + 2 SFP + 2 SFP+ 10 GbE as fixed network interfaces. Consider this model when integrated 10 GbE uplinks are required in a 1U appliance, with expansion capacity for additional interfaces. Plan the transceivers and validate application behavior under inspection; do not size the solution solely by uplink speed. The specification must distinguish integrated ports, optional modules and transceivers, and define licensing and continuity requirements.

Key features

Technical specifications

Performance
Firewall throughput47 GbpsHTTP traffic with 512 KB response size.
Firewall IMIX23.5 GbpsUDP mix of 66, 570 and 1518 byte packets.
Firewall latency (64-byte UDP)4 microsecondsMaximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services.
IPS throughput10.5 GbpsIPS enabled with HTTP traffic, the default IPS ruleset and 512 KB object size.
Threat protection7.4 GbpsFirewall, IPS, application control and malware prevention enabled using Enterprise Mix traffic.
NGFW throughput9 GbpsIPS and application control enabled with HTTP traffic, the default IPS ruleset and 512 KB object size.
Concurrent connections12,260,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services.
New connections per second186,500Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services.
IPsec VPN throughput25 GbpsHTTP throughput using multiple tunnels and 512 KB response size.
Concurrent IPsec tunnels6,500Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services.
Concurrent SSL VPN tunnels5,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services.
Xstream SSL/TLS inspection2.47 GbpsIPS enabled on HTTPS sessions with different cipher suites.
Concurrent SSL/TLS connections55,296Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services.
Hardware and environment
Local storageIntegrated minimum 240 GB SATA-III SSDNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Fixed Ethernet interfaces8 × GE copper; 2 × SFP fiber; 2 × SFP+ 10 GE fiberNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Maximum port density20Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Idle power consumption50 W / 170.77 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Maximum power consumption182 W / 621.97 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Form factor and mounting1U rackmount; two rack ears includedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Dimensions438 × 44 × 405 mmNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Weight4.7 kg unpacked; 7 kg packedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Power supplyInternal auto-ranging AC-DC, 100–240 VAC, 3–6 A at 50–60 Hz; optional external redundant PSUNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Operating temperature0°C to 40°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Storage temperature-20°C to +70°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Humidity10% to 90%, non-condensingNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Management ports1 × RJ45 MGMT; 1 × COM RJ45; 1 × Micro-USB (cable included)Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Other I/O ports2 × USB 3.0 front; 1 × USB 2.0 rearNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Bypass pairs1Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Flexi Port slots1Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Optional Flexi Port modules8-port GE copper; 8-port GE SFP; 4-port 10 GE SFP+; 4-port GE copper bypass; 4-port GE copper PoE + 4-port GE copper; 2-port 10 GE NBASE-T + 2-port 10 GE SFP+; 2-port GE fiber LC bypass + 4-port GE SFPNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Maximum PoE via Flexi PortOne Flexi Port module: 4 ports, 60 W maximumNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
Optional connectivitySFP DSL module (VDSL2); SFP/SFP+ transceivers; transceivers sold separatelyNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
DisplayMulti-function LCD moduleNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.
CertificationsCB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPINominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design.

Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.

Documents and references