Enterprise-grade firewall protection as a monthly subscription. The Sophos XGS 88 (Gen 2) with full Xstream Protection licensing — hardware, licence, support and lifecycle replacement in one predictable monthly price. No capital outlay, no licence renewals to track.
Why subscribe instead of buy
- Zero CapEx — one forecastable monthly operating cost instead of hardware purchase plus multi-year licence invoices.
- Never unlicensed — Xstream Protection is bundled for the life of the service, so IPS signatures, sandboxing and support can't lapse.
- Hardware refresh is our problem — faulty or end-of-life units are replaced under the service.
- Optional colocation bundle — we can rack, power and connect it in our data centre, in front of your hosted servers. Quoted separately.
Key specifications — Sophos XGS 88 (Gen 2)
| Firewall throughput | 9,900 Mbps |
| IPS / Threat protection / NGFW | 2,000 Mbps |
| IPsec VPN throughput | 6,000 Mbps |
| Xstream TLS 1.3 inspection | 600 Mbps |
| Concurrent connections | 1,600,000 |
| VPN tunnels (IPsec / SSL) | 500 / 500 |
| Interfaces | 4 × 2.5 GE copper |
| Design | Fanless, silent desktop unit — ideal for small offices and branches |
Included with your subscription
- Network Protection — next-gen IPS, Advanced Threat Protection, Security Heartbeat
- Web Protection — URL filtering, app control, TLS 1.3 decryption
- Zero-Day Protection — cloud sandboxing with SophosLabs AI analysis
- Central Orchestration — SD-WAN VPN orchestration and central reporting
- Email & Web Server Protection — anti-spam (proxy mode) and reverse-proxy WAF*
- Enhanced Support — 24/7 Sophos support, unlimited firmware updates
- SD-WAN, VPN & Sophos Central management — included in the base platform
*The XGS 88 does not support on-box reporting, dual-engine AV, WAF AV scanning or MTA-mode email — reporting is via Sophos Central. Need those features? Ask about the XGS 108 on the same subscription.
Subscription terms
£33.24/month ex VAT. Minimum 12-month commitment, billed monthly in advance, then rolling 30-day. Hardware remains our property and is replaced under the service. Colocation bundle priced on request.
