The wired specs are identical. The XGS 108w adds a built in wireless controller with two external antennas and Wi-Fi 6 (802.11ax), running the 2.4 GHz and 5 GHz bands at the same time. If the location just needs wired ports, the standard XGS 108 saves you the cost of radios you won't use.

Both options are on the table. Every XGS 108 ships with the Base License covering networking, SD-WAN, and VPN. From there you can add Network Protection, Web Protection, and Zero-Day Protection individually, or step up to the Xstream Protection bundle for all three plus DNS Protection, NDR Essentials, and Sophos Central orchestration in one package. Talk to a Sophos-certified rep and we'll match the licensing to what you're actually trying to protect.

Licenses are tied to the appliance they were issued for, so a straight transfer isn't how it works. What we can do is get you a new XGS 108 license sized correctly for your environment and help you move your configuration over with minimal downtime. We handle this migration regularly for customers coming off end of life SG and first generation XG hardware, so reach out and we'll walk you through it.

The 12,500 Mbps figure is firewall throughput measured in lab conditions with plain HTTP traffic and no other services running. Turn on IPS, TLS inspection, and Threat Protection, which is exactly what you want active on a live network, and the number drops because the appliance is doing real inspection work on every packet. On the XGS 108, Threat Protection throughput is rated at 2,500 Mbps and Xstream TLS inspection at 800 Mbps. Those are the numbers that reflect what you'll actually see with full protection turned on.

No. The XGS 108 is a desktop appliance and ships ready to sit on a shelf or desk. A rack mount kit is available as a separate accessory if you're installing it in a standard rack alongside your switches.

Everything lives in Sophos Central, the single cloud console where you manage firmware, subscriptions, and firewall policy. We keep track of renewal dates for our customers and reach out ahead of expiration so protection doesn't lapse. If a subscription is already close to expiring, contact our support team and we'll get the renewal processed.