Sophos XG 115 Firewall takes an innovative approach across all areas of network security. From the way firewalls are managed, to the way they report information and how they work with other security systems around them, giving you an unprecedented level of simplicity, insight, and advanced threat protection.
With an interface designed to eliminate unnecessary complexity, it enables you to use the powerful features without needing to become an IT security expert.
Advanced protection kept simple
Most firewall products make you set up and manage policies across multiple modules or screens. Not Sophos. We provide a powerful unified policy model that allows you to manage, view, filter, and sort all your user, application and network policies on a single screen.
Potent, powerful … fast
You get all the next-gen firewall features you need plus features you can’t get anywhere else – including our revolutionary Security Heartbeat™, full web application firewall, and complete email anti-spam, encryption and DLP. No extra hardware. No extra cost. Simply choose what you want to deploy
On-box reports included as standard
With hundreds of built-in reports you’ll know exactly what’s happening with your users and your network. You get detailed reports as standard, stored locally with no separate tools required. And our unique User Threat Quotient reports show you which of your users are putting your security at risk.
We’ve engineered XG Firewall to deliver outstanding performance. Our appliances are built using Intel multi-core technology, solid-state drives, and accelerated in-memory content scanning. In addition Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput.
Simply manage multiple firewalls
Sophos Firewall Manager provides a single console for the complete central management of multiple SF-OS firewalls. And if you also want to consolidate reporting across multiple SF-OS, Sophos UTM v9.x and Cyberoam OS appliances then with Sophos iView, you can.
Policy templates get you protected fast
Pre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint fast. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/outbound firewall rules and security settings for you automatically – displaying the final policy in a statement in plain English.
Patented Layer-8 Identity control
User identity takes enforcement to a whole new layer with our patented Layer-8 identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device. It literally takes firewall policy to a whole new layer
Flexible deployment, no compromise
Unlike our competitors whether you choose hardware, software, or virtual we don’t make you compromise – every feature is available on every model and form- factor
Automated user risk reports
The Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. Our firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behavior.
A revolution in advanced threat protection – Sophos Security Heartbeat
An industry first, our Security Heartbeat links your endpoints and your firewall to combine their intelligence and identify systems compromised by previously unknown threats. The Heartbeat status is integrated into security policy settings to instantly trigger actions at both endpoint and network levels to isolate or limit access until systems are healthy again. This feature requires Sophos Cloud Endpoint Protection Advanced or Sophos Cloud Enduser Protection.
Firewall max. 1 (Mbps): 2,300
Firewall Realworld 2 (Mbps): 1,630
ATP Realworld 2 (Mbps): 1,470
IPS max. 1 (Mbps): 500
IPS all rules (Mbps): 200
FW + ATP + IPS max. 1 (Mbps): 950
FW + ATP + IPS Realworld 2 (Mbps): 135
App Ctrl Realworld 2 (Mbps): 1,430
VPN AES max. 3 (Mbps): 425
VPN AES Realworld 4 (Mbps): 130
Web Proxy plain 5 (Mbps): 380
Web Proxy – AV 5 (Mbps): 120
Web requests/sec 5 – AV: 500
Maximum recommended connections
New TCP connections/sec: 20,000
Concurrent TCP connections: 1,000,000
Concurrent IPsec VPN tunnels: 145
Concurrent SSL VPN tunnels: 55
Concurrent Endpoints: 20
Concurrent Access Points: 20