Sophos XGS 136W UTM WiFi Firewall Appliance w/ 1-Year Standard Protection

Xstream Protection

Sophos Firewall’s Xstream architecture protects your network from the latest threats while accelerating your important SaaS, SD-WAN, and cloud application traffic.

High-Speed Connectivity
Customize your firewall's already versatile connectivity options with an extensive range of add-on modules for high-speed copper, fiber, Power over Ethernet (PoE), and Wi-Fi.

TLS 1.3 Inspection
According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organisations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience. Sophos Firewall removes the blind spots caused by encrypted traffic by allowing you to use SSL inspection while maintaining performance efficiency.

Provides standards-based site-to-site and remote access VPN (free up to the capacity of the firewall) with support for IPsec and SSL. Sophos Connect remote access VPN client for Windows and Macs offers seamless and easy deployment and configuration options.

Powerful Protection and Performance
Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection.

The Xstream architecture is engineered to deliver extreme levels of visibility, protection, and performance to help address some of the greatest challenges facing network administrators today.

A Single Bundle For Ultimate Protection
Sophos Firewall’s Xstream Protection bundle provides all the next-gen protection, performance and value you need to power even the most demanding networks. Also available with the XGS Series model of your choice included.

Simply manage multiple firewalls
Sophos Central is the ultimate cloud management platform for all your Sophos products. It makes day-to-day setup, monitoring, and management of your Sophos XGS 136W WiFi Firewall easy, and also provides helpful features such as alerting, backup management, one-click firmware updates and rapid provisioning of new firewalls.

Manage all your Sophos Firewalls and other Sophos products from a single console.
Configure changes and apply them to a group of firewalls or manage each firewall individually.
Create a backup schedule and store up to five backups in the cloud.
Schedule firmware updates across your entire network with just a few clicks.

Synchronised Application Control
Using Security Heartbeat, you can do much more than just see the health status of an endpoint, with a solution to one of the biggest problems most network administrators face today - lack of visibility into network traffic. Synchronised Application Control utilises the Heartbeat connections with Sophos endpoints to automatically identify, classify, and control application traffic. All encrypted, custom, evasive, and generic HTTP or HTTPS applications which are currently going unidentified will be revealed.

You can’t control what you can’t see. All firewalls today depend on static application signatures to identify apps. But those don’t work for most apps that are custom, obscure, evasive, or any apps using generic HTTP or HTTPS. The Sophos XGS 136W WiFi Firewall utilises Synchronised Security to automatically identify, classify, and control all unknown applications, easily blocking the apps you don’t want and prioritising the ones you do.

Synchronised SD-WAN: Powerful, reliable application routing
Synchronised SD-WAN harnesses the power of Synchronised Security to optimise WAN path selection for your important business applications. With Synchronised Application Control, discovered applications, which would otherwise be unknown, can be used for traffic matching criteria in SD-WAN routing policies. This is yet another way that Synchronised Security can improve the efficiency of your network.

Deep Packet Inspection

Stop the latest ransomware and breaches with high-performance streaming deep packet inspection, including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

Lateral Movement Protection
Lateral Movement Protection automatically isolates compromised systems at every point in the network to stop attacks dead in their tracks. Healthy endpoints assist by ignoring all traffic from unhealthy endpoints, enabling complete isolation, even on the same network segment, to prevent threats and active adversaries from spreading or stealing data.