Sophos · Firewalls
Sophos XGS 4300
Firewall with multiple high-speed uplinks and interface expansion.
Overview
The XGS 4300 uses a 1U rack form factor and provides 4 × 1 GbE + 4 × 2.5 GbE + 4 SFP+ 10 GbE as fixed network interfaces. Consider this model when the 1U design needs to combine multigigabit copper, multiple 10 GbE uplinks and two expansion positions. Distinguish port expansion from redundancy: additional modules do not replace a high-availability design. The specification must distinguish integrated ports, optional modules and transceivers, and define licensing and continuity requirements.
Key features
- 4 × 1 GbE + 4 × 2.5 GbE + 4 SFP+ 10 GbEModel feature verified in the family’s official technical documentation.
- Two Flexi Port slotsModel feature verified in the family’s official technical documentation.
- Optional second external power supplyModel feature verified in the family’s official technical documentation.
- Selection criterionConsider this model when the 1U design needs to combine multigigabit copper, multiple 10 GbE uplinks and two expansion positions.
- Design conditionDistinguish port expansion from redundancy: additional modules do not replace a high-availability design.
Technical specifications
| Firewall throughput | 75 GbpsHTTP traffic with 512 KB response size. |
|---|---|
| Firewall IMIX | 33 GbpsUDP mix of 66, 570 and 1518 byte packets. |
| Firewall latency (64-byte UDP) | 3 microsecondsMaximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPS throughput | 29.5 GbpsIPS enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Threat protection | 25.2 GbpsFirewall, IPS, application control and malware prevention enabled using Enterprise Mix traffic. |
| NGFW throughput | 23 GbpsIPS and application control enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Concurrent connections | 16,600,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| New connections per second | 368,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPsec VPN throughput | 62.5 GbpsHTTP throughput using multiple tunnels and 512 KB response size. |
| Concurrent IPsec tunnels | 8,500Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Concurrent SSL VPN tunnels | 7,500Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Xstream SSL/TLS inspection | 8 GbpsIPS enabled on HTTPS sessions with different cipher suites. |
| Concurrent SSL/TLS connections | 276,480Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Local storage | 1 × minimum 240 GB SATA-III SSDNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
|---|---|
| Fixed Ethernet interfaces | 4 × GE copper; 4 × 2.5 GE copper; 4 × SFP+ 10 GE fiberNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum port density | 28Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Idle power consumption | 131 W / 447.43 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum power consumption | 268.35 W / 916.56 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Form factor and mounting | 1U rackmount; sliding rails includedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Dimensions | 438 × 44 × 510 mmNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Weight | 8.7 kg unpacked; 14.9 kg packedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Power supply | Internal auto-ranging AC-DC, 100–240 VAC, 3.7–7.4 A at 50–60 Hz; optional external redundant PSUNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Operating temperature | 0°C to 40°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Storage temperature | -20°C to +70°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Humidity | 10% to 90%, non-condensingNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Management ports | 1 × RJ45 MGMT; 1 × COM RJ45; 1 × Micro-USB (cable included)Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Other I/O ports | 2 × USB 3.0 frontNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Bypass pairs | 2Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Flexi Port slots | 2Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional Flexi Port modules | 8-port GE copper; 8-port GE SFP; 4-port 10 GE SFP+; 4-port GE copper bypass; 4-port GE copper PoE + 4-port GE copper; 2-port 10 GE NBASE-T + 2-port 10 GE SFP+; 2-port GE fiber LC bypass + 4-port GE SFPNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum PoE via Flexi Port | Two Flexi Port modules: 4 ports and 60 W maximum eachNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional connectivity | SFP DSL module (VDSL2); SFP/SFP+ transceivers; transceivers sold separatelyNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Display | Multi-function LCD moduleNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPINominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.