The 2100's chassis with 30% more inspection muscle — as a monthly subscription. The Sophos XGS 2300 with complete Xstream Protection licensing: 1U rackmount hardware, licence, 24/7 support and lifecycle replacement in one predictable monthly price. For head offices and hosted deployments where encrypted-traffic inspection is the bottleneck.
Why subscribe instead of buy
- Zero CapEx — rackmount firewalls are a four-figure capital purchase plus multi-year licensing; here it's one forecastable monthly line.
- Never unlicensed — Xstream Protection is bundled for the life of the service, so IPS signatures, sandboxing and support can't lapse.
- Headroom where it counts — 7 Gbps IPS, 20.5 Gbps IPsec VPN and 1.45 Gbps of TLS 1.3 decryption over the 2100, in the same 1U chassis.
- Built for the rack — hardware LAN bypass pair, front LCD, Flexi Port expansion bay, optional redundant PSU, rackmount kit included.
- Hardware refresh is our problem — faulty or end-of-life units are replaced under the service with advance replacement.
- Colocation bundle — we rack, power and connect it in our data centre with remote hands included. Quoted to your requirements.
Key specifications — Sophos XGS 2300
| Firewall throughput | 39,000 Mbps |
| IPS throughput | 7,000 Mbps |
| Threat protection | 5,500 Mbps |
| NGFW throughput | 6,300 Mbps |
| IPsec VPN throughput | 20,500 Mbps |
| Xstream TLS 1.3 inspection | 1,450 Mbps |
| Concurrent connections | 6,500,000 |
| New connections/sec | 148,000 |
| VPN tunnels (IPsec / SSL) | 5,000 / 2,500 |
| Interfaces | 8 × GE copper (incl. 1 hardware bypass pair) + 2 × SFP fiber |
| Expansion | 1 × Flexi Port bay (copper / fiber / PoE / DSL modules) |
| Storage | Min. 120 GB SSD for on-box logs and quarantine |
| Architecture | Dual-processor: multi-core CPU + dedicated Xstream Flow processor |
| Form factor | 1U rackmount, front LCD, optional redundant PSU |
Included with your subscription
- Network Protection — next-gen IPS, Advanced Threat Protection, Security Heartbeat
- Web Protection — URL filtering, app control, TLS 1.3 decryption
- Zero-Day Protection — cloud sandboxing with SophosLabs AI analysis
- Central Orchestration — SD-WAN VPN orchestration and central reporting
- Email Protection — full anti-spam with MTA-mode support
- Web Server Protection — reverse-proxy WAF with antivirus scanning
- Enhanced Support — 24/7 Sophos support, unlimited firmware updates
- SD-WAN, VPN, on-box reporting & Sophos Central management — included in the base platform
Subscription terms
£478.12/month ex VAT. Minimum 12-month commitment, billed monthly in advance, then rolling 30-day. Hardware remains our property and is replaced under the service. Colocation bundle and Flexi Port modules priced on request.
Traffic under a gigabit with inspection on? The XGS 2100 saves you around £139/month. Growing past 500 users or need built-in 10 GE? The XGS 3100 is the next step.
