Sophos · Firewalls
Sophos XGS 4500
Higher-capacity 1U firewall for assessing inspected traffic and availability.
Overview
The XGS 4500 uses a 1U rack form factor and provides 4 × 1 GbE + 4 × 2.5 GbE + 4 SFP+ 10 GbE as fixed network interfaces. Consider this model when the network requires greater capacity in the 1U range and planning for redundant components. The appliance has dual SSDs with software RAID-1 support; a second internal power supply remains an option to be specified. The specification must distinguish integrated ports, optional modules and transceivers, and define licensing and continuity requirements.
Key features
- 4 × 1 GbE + 4 × 2.5 GbE + 4 SFP+ 10 GbEModel feature verified in the family’s official technical documentation.
- Two Flexi Port slotsModel feature verified in the family’s official technical documentation.
- Optional second internal power supplyModel feature verified in the family’s official technical documentation.
- Dual SSDs with software RAID-1Model feature verified in the family’s official technical documentation.
- Selection criterionConsider this model when the network requires greater capacity in the 1U range and the design calls for redundant-component planning.
- Design conditionThe appliance has dual SSDs with software RAID-1 support; a second internal power supply remains an option to be specified.
Technical specifications
| Firewall throughput | 80 GbpsHTTP traffic with 512 KB response size. |
|---|---|
| Firewall IMIX | 37 GbpsUDP mix of 66, 570 and 1518 byte packets. |
| Firewall latency (64-byte UDP) | 4 microsecondsMaximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPS throughput | 36.5 GbpsIPS enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Threat protection | 31.85 GbpsFirewall, IPS, application control and malware prevention enabled using Enterprise Mix traffic. |
| NGFW throughput | 30 GbpsIPS and application control enabled with HTTP traffic, the default IPS ruleset and 512 KB object size. |
| Concurrent connections | 17,200,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| New connections per second | 450,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| IPsec VPN throughput | 75.55 GbpsHTTP throughput using multiple tunnels and 512 KB response size. |
| Concurrent IPsec tunnels | 8,500Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Concurrent SSL VPN tunnels | 10,000Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Xstream SSL/TLS inspection | 10.6 GbpsIPS enabled on HTTPS sessions with different cipher suites. |
| Concurrent SSL/TLS connections | 276,480Maximum throughput measured under ideal test conditions using Keysight-Ixia BreakingPoint; actual performance varies with network conditions and activated services. |
| Local storage | 2 × minimum 240 GB SATA-III SSD (software RAID-1)Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
|---|---|
| Fixed Ethernet interfaces | 4 × GE copper; 4 × 2.5 GE copper; 4 × SFP+ 10 GE fiberNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum port density | 28Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Idle power consumption | 151 W / 515.74 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum power consumption | 268.35 W / 916.56 BTU/hNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Form factor and mounting | 1U rackmount; sliding rails includedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Dimensions | 438 × 44 × 510 mmNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Weight | 9.7 kg unpacked; 15.9 kg packedNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Power supply | Internal hot-swappable auto-ranging AC-DC, 100–240 VAC, 3.7–7.4 A at 50–60 Hz; optional internal redundant PSUNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Operating temperature | 0°C to 40°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Storage temperature | -20°C to +70°CNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Humidity | 10% to 90%, non-condensingNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Management ports | 1 × RJ45 MGMT; 1 × COM RJ45; 1 × Micro-USB (cable included)Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Other I/O ports | 2 × USB 3.0 frontNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Bypass pairs | 2Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Flexi Port slots | 2Nominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional Flexi Port modules | 8-port GE copper; 8-port GE SFP; 4-port 10 GE SFP+; 4-port GE copper bypass; 4-port GE copper PoE + 4-port GE copper; 2-port 10 GE NBASE-T + 2-port 10 GE SFP+; 2-port GE fiber LC bypass + 4-port GE SFPNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Maximum PoE via Flexi Port | Two Flexi Port modules: 4 ports and 60 W maximum eachNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Optional connectivity | SFP DSL module (VDSL2); SFP/SFP+ transceivers; transceivers sold separatelyNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Display | Multi-function LCD moduleNominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
| Certifications | CB, CE, UKCA, UL, FCC, ISED, VCCI, KC, RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPINominal manufacturer specification; accessories, transceivers, redundancy and environmental conditions must be confirmed during design. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.