Rack-grade security for head offices and hosted environments — as a monthly subscription. The Sophos XGS 2100 with complete Xstream Protection licensing: 1U rackmount hardware, licence, 24/7 support and lifecycle replacement in one predictable monthly price. The natural entry point to our colocation bundle — racked in our data centre, directly in front of your servers.
Why subscribe instead of buy
- Zero CapEx — rackmount firewalls are a four-figure capital purchase plus multi-year licensing; here it's one forecastable monthly line.
- Never unlicensed — Xstream Protection is bundled for the life of the service, so IPS signatures, sandboxing and support can't lapse.
- Built for the rack — 1U chassis with rackmount kit included, hardware LAN bypass pair to keep traffic flowing during maintenance, front LCD for on-site diagnostics, and an optional second power supply.
- Adaptable connectivity — a modular Flexi Port expansion bay accepts additional copper, fiber, PoE or DSL modules as your network changes.
- Hardware refresh is our problem — faulty or end-of-life units are replaced under the service with advance replacement.
- Colocation bundle — we rack, power and connect it in our data centre with remote hands included. Quoted to your requirements.
Key specifications — Sophos XGS 2100
| Firewall throughput | 30,000 Mbps |
| IPS throughput | 6,000 Mbps |
| Threat protection | 5,000 Mbps |
| NGFW throughput | 5,200 Mbps |
| IPsec VPN throughput | 17,000 Mbps |
| Xstream TLS 1.3 inspection | 1,100 Mbps |
| Concurrent connections | 6,500,000 |
| New connections/sec | 134,700 |
| VPN tunnels (IPsec / SSL) | 5,000 / 2,500 |
| Interfaces | 8 × GE copper (incl. 1 hardware bypass pair) + 2 × SFP fiber |
| Expansion | 1 × Flexi Port bay (copper / fiber / PoE / DSL modules) |
| Storage | Min. 120 GB SSD for on-box logs and quarantine |
| Architecture | Dual-processor: multi-core CPU + dedicated Xstream Flow processor |
| Form factor | 1U rackmount, front LCD, optional redundant PSU |
Included with your subscription
- Network Protection — next-gen IPS, Advanced Threat Protection, Security Heartbeat
- Web Protection — URL filtering, app control, TLS 1.3 decryption
- Zero-Day Protection — cloud sandboxing with SophosLabs AI analysis
- Central Orchestration — SD-WAN VPN orchestration and central reporting
- Email Protection — full anti-spam with MTA-mode support
- Web Server Protection — reverse-proxy WAF with antivirus scanning
- Enhanced Support — 24/7 Sophos support, unlimited firmware updates
- SD-WAN, VPN, on-box reporting & Sophos Central management — included in the base platform
Subscription terms
£339.58/month ex VAT. Minimum 12-month commitment, billed monthly in advance, then rolling 30-day. Hardware remains our property and is replaced under the service. Colocation bundle and Flexi Port modules priced on request.
Need 10 GE fiber built in, or supporting 500+ users? Step up to the XGS 3100. Smaller site without a rack? The XGS desktop range starts at a fraction of the price.
