Serious inspection headroom for busy networks — as a monthly subscription. The Sophos XGS 118 (Gen 2) with complete Xstream Protection licensing: hardware, licence, 24/7 support and lifecycle replacement in one predictable monthly price. Built for larger offices running gigabit-plus connections with full security inspection enabled.
Why subscribe instead of buy
- Zero CapEx — one forecastable monthly operating cost instead of hardware purchase plus multi-year licence invoices.
- Never unlicensed — Xstream Protection is bundled for the life of the service, so IPS signatures, sandboxing and support can't lapse.
- Room to grow — 3.5 Gbps of IPS throughput and nine 2.5 GE ports mean this unit won't be the bottleneck as your headcount and bandwidth increase.
- 5G failover ready — optional 5G module adds cellular backup or fixed wireless access, managed from the firewall itself.
- Hardware refresh is our problem — faulty or end-of-life units are replaced under the service.
- Optional colocation bundle — we can rack, power and connect it in our data centre, in front of your hosted servers. Quoted separately.
Key specifications — Sophos XGS 118 (Gen 2)
| Firewall throughput | 15,500 Mbps |
| IPS throughput | 3,500 Mbps |
| Threat protection | 3,250 Mbps |
| NGFW throughput | 3,950 Mbps |
| IPsec VPN throughput | 13,000 Mbps |
| Xstream TLS 1.3 inspection | 1,100 Mbps |
| Concurrent connections | 5,500,000 |
| VPN tunnels (IPsec / SSL) | 1,500 / 1,250 |
| Interfaces | 9 × 2.5 GE copper + 1 × SFP fiber |
| Expansion | Optional 5G module for cellular failover / FWA |
| Design | Desktop with optimised low-noise thermal design and optional redundant power supply |
Included with your subscription
- Network Protection — next-gen IPS, Advanced Threat Protection, Security Heartbeat
- Web Protection — URL filtering, app control, TLS 1.3 decryption
- Zero-Day Protection — cloud sandboxing with SophosLabs AI analysis
- Central Orchestration — SD-WAN VPN orchestration and central reporting
- Email Protection — full anti-spam with MTA-mode support for queued delivery
- Web Server Protection — reverse-proxy WAF with antivirus scanning
- Enhanced Support — 24/7 Sophos support, unlimited firmware updates
- SD-WAN, VPN, on-box reporting & Sophos Central management — included in the base platform
Subscription terms
£85.36/month ex VAT. Minimum 12-month commitment, billed monthly in advance, then rolling 30-day. Hardware remains our property and is replaced under the service. Colocation bundle priced on request. Optional 5G module quoted separately.
Smaller site with under 25 users? The XGS 108 offers the full feature set at a lower price. Need silent, fanless operation? Consider the XGS 88 or 108.
