Sophos XGS 87 Network Security/Firewall Appliance

Powerful protection and performance converge in the Sophos XGS 87, a compact yet capable network security firewall designed for small to midsize networks. Built on the acclaimed Xstream architecture with dedicated Flow Processors, the XGS 87 delivers application acceleration, fast TLS decryption and inspection, and comprehensive threat protection without compromising throughput or user experience. This is more than a firewall—it’s a security platform that scales with your organization, enabling your team to deploy, monitor, and enforce security policies with ease while maintaining the performance your business relies on.

With Xstream architecture and Flow Processors driving accelerating capabilities, the XGS 87 handles encrypted traffic, streaming workloads, and cloud-based applications with minimal latency. Enterprises can deploy TLS inspection at scale, enabling visibility and control over encrypted traffic that often hides threats. The device combines intrusion prevention, application control, web filtering, and threat protection to create a robust defense-in-depth strategy. Add to that the familiar ease of management via Sophos Firewall OS and seamless integration with Sophos Central, and you have a security gateway that protects users, simplifies administration, and reduces total cost of ownership.

The Sophos XGS 87 is designed to shield your network edge while staying out of your way. It enables secure remote access for employees, site-to-site connectivity for branch offices, and policy-based traffic routing that ensures critical business apps stay prioritized. The appliance’s 1U form factor fits neatly into standard racks, making it ideal for data closets, small data centers, or edge deployments where space is at a premium. Yet it’s not just a compact device—it’s a scalable security solution that grows with your network as bandwidth needs evolve, user counts rise, and new security demands emerge.

• Xstream architecture with dedicated Flow Processors delivers application acceleration and high-performance TLS inspection for encrypted traffic without sacrificing speed or user experience.
• Comprehensive threat protection including IPS, anti-malware, web protection, and optional sandboxing to detect and block advanced threats before they affect users.
• Granular policy control with application-aware and user-based access, enabling safe use of business-critical apps while blocking risky or non-work-related traffic.
• Flexible networking and VPN options, including site-to-site and remote access VPN, with centralized management through Sophos Central for consistent policy enforcement across all locations.
• Reliable, enterprise-grade build in a 1U form factor designed for quiet operation, energy efficiency, and long-term reliability in busy networks.

Technical Details of Sophos XGS 87

• Model: Sophos XGS 87
• Form factor: 1U rack-mountable network security appliance
• Processor architecture: Dedicated Xstream Flow Processors powering high-throughput firewalling and TLS inspection
• Networking: Integrated ports with scalable uplink options; exact port mix varies by SKU
• Security features: Stateful firewall, Intrusion Prevention System (IPS), TLS/SSL inspection, web protection, application control, VPN (site-to-site and remote access), and optional sandboxing
• Management: Sophos Firewall OS with optional centralized management via Sophos Central
• Operating system: Sophos Firewall OS
• Power and reliability: 100–240V AC input; optimized cooling for continuous operation

How to install Sophos XGS 87

• Power down the appliance, mount it in a 19-inch rack, and connect the power and network cables to appropriate switch ports and uplinks.
• Power on the device and access the default management interface through the initial IP address or onboard console to begin the setup wizard.
• Configure administrator credentials, apply a valid license, and connect the appliance to your management environment, either on-device or via Sophos Central for centralized visibility.
• Run the initial configuration to set up basic networking, WAN connections, and security policies. Enable TLS inspection, IPS, web protection, and application control according to your security requirements.
• Import or create firewall rules, VPN configurations (site-to-site and remote access), and user/group policies. Update firmware to the latest release and verify connectivity to cloud services for centralized management and reporting.

Frequently asked questions

• Q: What is the primary use case for the Sophos XGS 87?
  A: It is designed for small to midsize networks needing robust next-generation firewall protection, TLS inspection, and comprehensive threat defense with scalable performance.
• Q: Does the XGS 87 support TLS inspection?
  A: Yes. The XGS 87 includes high-performance TLS/SSL inspection powered by the Xstream architecture to reveal threats hidden in encrypted traffic.
• Q: Can I manage this device via a cloud service?
  A: Yes. Sophos Central provides centralized management, policy enforcement, and reporting across multiple appliances and sites.
• Q: Which VPN options are available?
  A: The appliance supports site-to-site VPN and remote access VPN, enabling secure connectivity for remote users and multiple branches.
• Q: What kind of policies can I enforce?
  A: You can implement granular, user- or group-based policies that combine application control, web protection, IPS, and TLS-inspection rules to balance security and productivity.