Sophos XGS 116W UTM WiFi Firewall Appliance w/ 1-Year Standard Protection

The XGS 116 desktop firewalls offer excellent value for money and are therefore ideal for small businesses and for remote offices with up to 15 employees. They are available with or without integrated WiFi. This gives you an all-in-one network security and hotspot solution without having to purchase additional hardware. Of course, you can also add external access points. These models are based on multi-core technology designed for optimal performance and efficiency in a small form factor, and are equipped with 6 integrated GbE copper ports.

Powerful Performance
The XGS Series delivers Xstream performance at every price point to power the protection you need for today's diverse, distributed, and encrypted networks.
Powered by Xstream
Accelerate and offload your important SaaS, SD-WAN, and cloud traffic at the hardware level, while adding performance headroom for TLS and deep packet inspection with integrated Xstream Flow Processors.
High-Speed Connectivity
Customize your firewall's already versatile connectivity options with an extensive range of add-on modules for high-speed copper, fiber, Power over Ethernet (PoE), and Wi-Fi.
Purpose-Built Performance
Rest assured, your firewall is purpose-built from the core to handle the most demanding workloads with a dual processor architecture, generous memory provisioning, and high-performance solid-state storage.

Simply manage multiple firewalls
Sophos Central is the ultimate cloud management platform for all your Sophos products. It makes day-to-day setup, monitoring, and management of your Sophos XGS 116W WiFi Firewall easy, and also provides helpful features such as alerting, backup management, one-click firmware updates and rapid provisioning of new firewalls.
Manage all your Sophos Firewalls and other Sophos products from a single console.
Configure changes and apply them to a group of firewalls or manage each firewall individually.
Create a backup schedule and store up to five backups in the cloud.
Schedule firmware updates across your entire network with just a few clicks.

TLS 1.3 Inspection
According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organisations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience. Sophos Firewall removes the blind spots caused by encrypted traffic by allowing you to use SSL inspection while maintaining performance efficiency.

Firewall Reporting in the cloud
Sophos Central includes powerful reporting tools that enable you to visualise your network, web, application activity, and security over time. You get a flexible reporting experience that combines a variety of built-in reports with powerful tools to create your own custom reports, enabling you to report what you want, how you want.

Increase your visibility into network activity through analytics.
Analyse data to identify security gaps, suspicious user behaviour or other events requiring policy changes.
Use the pre-defined modules or customise each report for specific use cases.

Security Heartbeat
The Sophos XGS 116W WiFi Firewall is the only network security solution that is able to fully identify the user and source of an infection on your network, and automatically limit access to other network resources in response. This is made possible with the unique Sophos Security Heartbeat that shares telemetry and health status between Sophos endpoints and your firewall, and integrates endpoint health into firewall rules to control access and isolate compromised systems. This all happens automatically, and is successfully helping numerous businesses and organisations to save time and money in protecting their environments today

TLS 1.3 Decryption
Remove an enormous blind spot with intelligent TLS inspection that's fast and effective, supporting the latest standards with extensive exceptions and point-and-click policy tools to make your job easy.
Deep Packet Inspection
Stop the latest ransomware and breaches with high-performance streaming deep packet inspection, including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.
Application Acceleration
Accelerate your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies, putting them on the Xstream FastPath to optimize performance.

Application Acceleration
A significant portion of your network traffic is important business application traffic destined for branch offices, remote users, or cloud application servers. This trusted traffic, which needs no additional security scanning for threats or malware, can be intelligently directed to the FastPath, reducing latency and optimising overall performance. This provides added capacity and headroom for traffic that does need deep packet inspection. Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies - putting them on the FastPath through the Xstream Flow Processors.

Security Heartbeat
The Sophos XGS 116W WiFi Firewall is the only network security solution that is able to fully identify the user and source of an infection on your network, and automatically limit access to other network resources in response. This is made possible with the unique Sophos Security Heartbeat that shares telemetry and health status between Sophos endpoints and your firewall, and integrates endpoint health into firewall rules to control access and isolate compromised systems. This all happens automatically, and is successfully helping numerous businesses and organisations to save time and money in protecting their environments today.

Synchronised Application Control
Using Security Heartbeat, you can do much more than just see the health status of an endpoint, with a solution to one of the biggest problems most network administrators face today - lack of visibility into network traffic. Synchronised Application Control utilises the Heartbeat connections with Sophos endpoints to automatically identify, classify, and control application traffic. All encrypted, custom, evasive, and generic HTTP or HTTPS applications which are currently going unidentified will be revealed.
You can’t control what you can’t see. All firewalls today depend on static application signatures to identify apps. But those don’t work for most apps that are custom, obscure, evasive, or any apps using generic HTTP or HTTPS. The Sophos XGS 116W WiFi Firewall utilises Synchronised Security to automatically identify, classify, and control all unknown applications, easily blocking the apps you don’t want and prioritising the ones you do.

Synchronised SD-WAN: Powerful, reliable application routing
Synchronised SD-WAN harnesses the power of Synchronised Security to optimise WAN path selection for your important business applications. With Synchronised Application Control, discovered applications, which would otherwise be unknown, can be used for traffic matching criteria in SD-WAN routing policies. This is yet another way that Synchronised Security can improve the efficiency of your network.