Unrivalled performance, security and control
Sophos XG Firewall takes an innovative approach across all areas of network security. From the way firewalls are managed, to the way they report information and how they work with other security systems around them, giving you an unprecedented level of simplicity, insight, and advanced threat protection.
- Next-generation network protection
- Security HeartbeatTM
- Unified user, application and network control
- Instant visibility
- Powerful management and scalability
Sophos XG Firewall
The ultimate security package With an interface designed to eliminate unnecessary complexity, it enables you to use the powerful features without needing to become an IT security expert.
Advanced protection kept simple
Most firewall products make you set up and manage policies across multiple modules or screens. Not Sophos. We provide a powerful unified policy model that allows you to manage, view, filter, and sort all your user, application and network policies on a single screen.
Potent, powerful ... fast
We’ve engineered XG Firewall to deliver outstanding performance. Our appliances are built using Intel multi-core technology, solid-state drives, and accelerated in-memory content scanning. In addition Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput.
On-box reports included as standard
With hundreds of built-in reports you’ll know exactly what’s happening with your users and your network. You get detailed reports as standard, stored locally with no separate tools required. And our unique User Threat Quotient reports show you which of your users are putting your security at risk.
You get all the next-gen firewall features you need plus features you can’t get anywhere else - including our revolutionary Security HeartbeatTM, full web application firewall, and complete email anti-spam, encryption and DLP. No extra hardware. No extra cost. Simply choose what you want to deploy.
Simply manage multiple firewalls
Sophos Firewall Manager provides a single console for the complete central management of multiple SF-OS firewalls. And if you also want to consolidate reporting across multiple SF-OS, Sophos UTM v9.x and Cyberoam OS appliances then with Sophos iView, you can.
Security features you can’t get anywhere else
As well as simplifying core network security tasks Sophos delivers innovative approaches to ensure you get even more protection.
Policy templates get you protected fast
Pre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint fast. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/ outbound firewall rules and security settings for you automatically - displaying the final policy in a statement in plain English.
Patented Layer-8 Identity control
User identity takes enforcement to a whole new layer
with our patented Layer-8 identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device. It literally takes firewall policy to a whole new layer.
Flexible deployment, no compromise
Unlike our competitors whether you choose hardware, software, or virtual we don’t make you compromise - every feature is available on every model and form- factor.
Automated user risk reports
The Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. Our firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behavior.
A revolution in advanced threat protection - Sophos Security HeartbeatTM
An industry first, our Security Heartbeat links your endpoints and your firewall to combine their intelligence and identify systems compromised by previously unknown threats. The Heartbeat status is integrated into security policy settings to instantly trigger actions at both endpoint and network levels to isolate or limit access until systems are healthy again. This feature requires Sophos Cloud Endpoint Protection Advanced or Sophos Cloud Enduser Protection.