Sophos · Firewalls
Sophos XGS 3300
1U firewall for higher inspection demand in distributed environments.
Overview
The XGS 3300 uses a 1U rack form factor and provides 8 × 1 GbE + 2 SFP + 2 SFP+ 10 GbE as fixed network interfaces. Compare it with the XGS 3100 in networks with similar interfaces and greater inspection or concurrent-traffic demands. Traffic between internal segments also consumes capacity; include this flow in the analysis alongside the internet links. The specification must distinguish integrated ports, optional modules and transceivers, and define licensing and continuity requirements.
Key features
- 8 × 1 GbE + 2 SFP + 2 SFP+ 10 GbEModel feature verified in the family’s official technical documentation.
- One Flexi Port slotModel feature verified in the family’s official technical documentation.
- Optional second external power supplyModel feature verified in the family’s official technical documentation.
- Selection criterionCompare it with the XGS 3100 in networks with similar interfaces and greater inspection or concurrent-traffic demands.
- Design conditionTraffic between internal segments also consumes capacity; include this flow in the analysis alongside the internet links.
Technical specifications
| Firewall throughput | 58 GbpsHTTP traffic with 512 KB response size. |
|---|---|
| Firewall IMIX | 27 GbpsUDP mix of 66, 570 and 1518 byte packets. |
| Firewall latency (64-byte UDP) | 4 microsecondsMaximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPS throughput | 14 GbpsIPS enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Threat protection | 10 GbpsFirewall, IPS, application control and malware prevention enabled using Enterprise Mix traffic. |
| NGFW throughput | 12.5 GbpsIPS and application control enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Concurrent connections | 13,700,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| New connections per second | 257,800Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPsec VPN throughput | 31.1 GbpsHTTP throughput using multiple tunnels and 512 KB response size. |
| Concurrent IPsec tunnels | 6,500Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Concurrent SSL VPN tunnels | 5,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Xstream SSL/TLS inspection | 3.13 GbpsIPS enabled on HTTPS sessions with different cipher suites. |
| Concurrent SSL/TLS connections | 102,400Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Local storage | Integrated minimum 240 GB SATA-III SSDNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
|---|---|
| Fixed Ethernet interfaces | 8 × GE copper; 2 × SFP fiber; 2 × SFP+ 10 GE fiberNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum port density | 20Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Idle power consumption | 50 W / 170.77 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum power consumption | 201 W / 686.68 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Form factor and mounting | 1U rackmount; two rack ears includedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Dimensions | 438 × 44 × 405 mmNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Weight | 4.7 kg unpacked; 7 kg packedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Power supply | Internal auto-ranging AC-DC, 100–240 VAC, 3–6 A at 50–60 Hz; optional external redundant PSUNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Operating temperature | 0°C to 40°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Storage temperature | -20°C to +70°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Humidity | 10% to 90%, non-condensingNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Management ports | 1 × RJ45 MGMT; 1 × COM RJ45; 1 × Micro-USB (cable included)Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Other I/O ports | 2 × USB 3.0 front; 1 × USB 2.0 rearNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Bypass pairs | 1Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Flexi Port slots | 1Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional Flexi Port modules | 8-port GE copper; 8-port GE SFP; 4-port 10 GE SFP+; 4-port GE copper bypass; 4-port GE copper PoE + 4-port GE copper; 2-port 10 GE NBASE-T + 2-port 10 GE SFP+; 2-port GE fiber LC bypass + 4-port GE SFPNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum PoE via Flexi Port | One Flexi Port module: 4 ports, 60 W maximumNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional connectivity | SFP DSL module (VDSL2); SFP/SFP+ transceivers; transceivers sold separatelyNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Display | Multi-function LCD moduleNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPINominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.