🌐
SOPHOS
sophos.com › en-us › products › next-gen-firewall
Consolidate Your Security with Sophos Firewall
The XGS Series of next-gen firewall appliances delivers Sophos Xstream-accelerated performance at every price point to power the protection you need for today’s diverse, distributed, and encrypted networks.
🌐
SOPHOS
sophos.com › en-us › free-tools › sophos-xg-firewall-home-edition
Free Home Firewall | Home Edition Firewall Tool
NOTE: The Sophos Free Home Use firewall contains its own operating system and will overwrite all data on the computer during the installation process. Therefore, a separate, dedicated computer is needed, which will change into a fully functional security appliance.
Discussions

Issues with Sophos XG and Discord Video / Audio
Hi there, Please create a test firewall rule for your IP and do not apply any scanning or content filtering and allow all the ports in the firewall rule and verify the status. Please put the firewall rule on the top, please check DOS settings. ^KG More on reddit.com
🌐 r/sophos
29
2
March 3, 2020
Sophos XG BGP Failover and WAN Alias for Port Forwards
Forgive me if I'm mistaken, but it sounds like you're trying to HA. Have you already gone through the HA setup? If you configure everything on the primary and then configure the secondary with an IP in the same primary Lan then the secondary will assume all the aliases and port forwards More on reddit.com
🌐 r/sophos
3
2
January 2, 2018
Sophos XG Firewall: Behavior change in releasing the email from Quarantine Digest email

Yet another disappointment with the XG's email protection module. I am seriously considering simply setting up SMTP NAT to our old internal spam filter (SpamTitan).

More on reddit.com
🌐 r/sophos
6
2
May 31, 2019
Sophos XG Firewall v18 MR3: SSMK(Secure Storage Master Key) for encryption of sensitive data.
Good stuff! Started rolling this out today :) More on reddit.com
🌐 r/sophos
2
6
June 14, 2020
🌐
Reddit
reddit.com › r/sophos › sophos xg... path to an early grave
r/sophos on Reddit: Sophos XG... Path to an early grave
August 31, 2022 -

I try...I really really try to love it, but it is literally the absolutely worst firewall product I have ever used in 20+ years.I want to write a book on all of the things that are wrong with it, but I need to enjoy the rest of my life in peace.What are the things you all don't like? Maybe our lists will align.

EDIT: For clarification....this is hopefully going to provide some insight to Sophos on what to FIX... because, it doesn't seem like after 6+ years they are making much progress...AND, XG does actually have a lot of potential, it just needs a LOT of TLC. Maybe we can make a difference, and make the product usable and functional in larger and more complex environments (where it seems to fall on its face most often).

Top answer
1 of 5
15
XG is garbage compared to the SG.
2 of 5
13
I started writing a list when I was really pissed about a lot of stuff that was bad on XG (or at least worse than SG). To be fair, XG is getting better and V19 is already ten times better than when I started using XG with V17.5. Here are some of my points: No NTP server Since Sophos recommends migrating SG to XG, they should at least support every feature that was supported on the 'old' product No DHCP Options (at least via GUI) They fixed this in V19, took them long enough Interfaces can't be disabled in the Webinterface I don't want to delete and re-enter everything if I want to disable an interface You can't select an Active Directory Group for Sophos Admin Users Was possible on SG, now you have to elevate every user manually if you want to use AD users as admin IPSEC VPN only possible on WAN Interfaces Site-to-site and Remote Access. If you tell this Sophos, they just ask 'Why would you ever need to do this? Configure your segmentation and your zones correctly'. Strangely though, with SSL VPN it is working without problems. Why would I ever need this? HA Port monitoring not possible on VLAN-level No 'where used' for objects This is a huge one, especially because you can't delete some objects when they are used somewhere The 'object-oriented' concept is not really consistent. In many configuration menus you can't use Host Objects but you have to type the IP address manually More maintenance effort and you have to consider many things if e.g. an Ip address changes You can't create Web Filter Exceptions for users Auto-creation of firewall rules when configuring IPSec VPN sucks. They just create a rule with all source and destination networks. This means, if I have 2 subnets on one location in the IPSec VPN, they both can access each other now. Congratulations. OSPF Sophos won't propagate your IPSec Client vpn network with OSPF They change random thigs on updates causing strange behaviour From one version to another, they changed the maximum length of a password field (I think it was in notification settings --> mail server). Because our password was longer before the update, this caused the Firewall to crash everytime we started the update. Took a while to figure that out. I don't know if they already fixed some of them, if so, my bad. Most of these points aren't particularly bad, it's just very tedious and costs more time and nerves than it should. Reading this again, this sounds like a huge rant. It is not supposed to be one. It's just a collection of very small rants I had over the last 3 years..
🌐
SOPHOS
sophos.com › en-us › products › next-gen-firewall › firewall-comparison
Sophos XGS Series Firewall Comparison - Desktop, 1U & 2U Models
It’s all managed from the Sophos Central console and tightly integrated and synchronized to help you instantly identify and respond to threats. The XGS Series models offer excellent performance and connectivity at every price point to power the protection you need for today’s diverse, ...
🌐
Firewalls.com
firewalls.com › home › brands › sophos › xg firewalls
Sophos Next Generation XG Firewalls - Information, Pricing, & Reviews
Sophos · Firewalls · XG Firewalls · Firewall Throughput: 3.0 Gbps · VPN Throughput: 225 Mbps · Max DPI Connections: 3,200,000 · Revision No.: Rev 1 · Ports/Slots: 4 Shop XG 86 · Firewall Throughput: 3.5 Gbps · VPN Throughput: 360 Mbps · Max DPI Connections: 3,200,000 ·
🌐
EnterpriseAV
enterpriseav.com › xg-firewall.asp
Sophos XG Firewall: Upgrade Before EOL on March 31, 2025 | EnterpriseAV.com
All XG Series hardware appliances will be end-life and end-support after March 31, 2025, irrespective of how they are deployed and licensed. This includes XG hardware appliances deployed with MSP Flex licensing. Sophos Firewall OS (SFOS) v20 will be the last major release to support the XG ...
🌐
Sophos
sophos.com › en-us › blog › upgrading-your-sophos-firewall-from-xg-to-xgs
Upgrading your Sophos Firewall from XG to XGS | SOPHOS
August 5, 2024 - The Sophos TechVids team has created some comprehensive step-by-step videos to walk you through the entire XG to XGS upgrade process, whether you have an individual appliance or an HA deployment.
Find elsewhere
🌐
Nexpose
docs.rapid7.com › insightidr › sophos-xg-firewall
Sophos XG Firewall | SIEM Documentation
Sophos XG is an on-premises next-generation firewall appliance that can send its logs to SIEM (InsightIDR).
🌐
SOPHOS
sophos.com › en-us › free-tools › sophos-xg-firewall-home-edition › software
Free Firewall Download: Sophos Home Edition Firewall
Download the free Sophos firewall home edition. A separate dedicated computer is needed - turn it into a fully functional security appliance.
🌐
EnterpriseAV
enterpriseav.com › xg-firewall-products.asp
Sophos XG Firewall Products | EnterpriseAV.com
XG Firewall’s all-new Xstream architecture delivers extreme levels of visibility, protection, and performance. Synchronize your endpoint and firewall security in real time with Sophos XG.
🌐
eBay
ebay.com › electronics › computers/tablets & networking › enterprise networking, servers › firewall & vpn devices
Sophos Xg | eBay
Sophos XG firewalls offer features like network protection, web filtering, email protection, and application control. They also provide advanced threat protection with AI capabilities and real-time visibility into network activity.
🌐
Sophos
techvids.sophos.com
Sophos Techvids – Expert Tutorials & Cybersecurity Insights
The Techvids library gives you access to in-depth video tutorials, product demos, and troubleshooting guides to enhance your fundamental cybersecurity knowledge and get the most out of your products.
🌐
Corporate Armor
corporatearmor.com › home › products › sophos xg 86 entry-level desktop firewall with enterpriseprotect
Sophos XG 86 Entry-level Desktop Firewall with EnterpriseProtect - Corporate Armor
Sophos XG 86 Entry-level Desktop Firewall with EnterpriseProtect
Sophos XG 86 Entry-level Desktop Firewall with EnterpriseProtect, 1 Year, 2 Years and 3 Years options available
Price   $469.62
🌐
Amazon
amazon.com › Sophos-XGS-136-Protection-IA1D5CSUS › dp › B095L22M8X
Amazon.com: Sophos XGS 136 Next-Gen Firewall with Xstream Protection, 5-Year (US Power Cord) (IA1D5CSUS) : Electronics
Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection.
🌐
Optrics
sophos.optrics.com › downloads › sophos-xg-firewall-datasheet.pdf pdf
Sophos XG Firewall
We’ve engineered XG Firewall to deliver outstanding performance. Our appliances are · built using Intel multi-core technology, solid-state drives, and accelerated in-memory · content scanning. In addition Sophos FastPath packet optimization technology
🌐
Howdy
howdy.com › glossary › sophos-xg-firewall
Sophos Xg Firewall | DevOps and Infrastructure - Howdy
The Howdy Glossary contains short definitions of common technical terms.
🌐
Corporate Armor
corporatearmor.com › home › newsroom › sophos › sophos sg or xg – which is right for me?
Sophos SG or XG - Which is right for me? - Corporate Armor
October 20, 2020 - Basically, the hardware on the SG and XG series are extremely similar in terms of CPU, RAM, memory, and ports. The main difference is that SG Series appliances come pre-installed with UTM 9 firmware while XG firewalls come pre-installed with XG firewall firmware. As a newer product, the XG’s Sophos Firewall Operating System (SFOS) is updated more frequently.
🌐
GNS3
gns3.com › marketplace › appliances › sophos-xg
Sophos XG Firewall
Login · Software · Documentation · Community · Marketplace · Sign in
🌐
SOPHOS
sophos.com › en-us › products › next-gen-firewall › xgs-smb-branch-office-firewalls
View the Sophos XGS Series Firewall Appliances for SMBs, 2nd Gen Models
The XGS 88 to XGS 128 models feature a streamlined, single-CPU architecture that utilizes virtual FastPath technology for traffic acceleration (in combination with Sophos Firewall OS v21 and higher). As our gateway model to the distributed edge, the XGS 138 boasts a dedicated Xstream Flow processor for hardware acceleration and two 10 GE SFP+ interfaces for high-speed fiber connectivity.
Published   November 6, 2025