1. Introduction
The Sophos XGS 87w is a next-generation firewall designed to provide robust network security for small to medium businesses. This device integrates advanced threat protection, Wi-Fi capabilities, and comprehensive network management features to safeguard your network infrastructure. This manual provides essential information for setting up, operating, and maintaining your Sophos XGS 87w firewall.
2. Package Contents
Verify that all items are present in your Sophos XGS 87w package:
- Sophos XGS 87w Firewall Appliance
- Power Adapter (US Power Cord)
- Ethernet Cable
- Quick Start Guide (if applicable)
- Warranty and Safety Information
3. Hardware Overview
3.1 Front Panel

The front panel of the Sophos XGS 87w features status indicators and connectivity ports. From left to right, you will find the XGS 87w model label, a COM port, a USB port, the Sophos logo, and a series of LED indicators for activity, link status, speed, and overall device status. These LEDs provide quick visual feedback on the device's operational state and network activity.
3.2 Rear Panel

The rear panel includes power input, additional ports, and antennas. From left to right: DC IN 1 (12V power input), a COM port, a USB port, an F1 port, and multiple LAN/WAN ports (1/LAN, 2/WAN, 3, 4). Two external antennas are present for wireless connectivity. A reset button is also located on the far right.
4. Setup Instructions
4.1 Physical Connection
- Connect Antennas: Attach the two external antennas to the connectors on the rear panel.
- Connect to Network: Connect your internet service provider's modem or router to the 2/WAN port using an Ethernet cable.
- Connect to Local Network: Connect your local network devices (computers, switches) to the 1/LAN, 3, or 4 ports using Ethernet cables.
- Connect Power: Plug the power adapter into the DC IN 1 (12V) port on the rear panel, then plug the adapter into a power outlet.
- Power On: The device will automatically power on. Observe the front panel LEDs for boot-up status.
4.2 Initial Configuration
After physical setup, access the device's web-based management interface for initial configuration. Refer to the Quick Start Guide included with your product for the default IP address and login credentials. It is recommended to change default credentials immediately after the first login.
5. Operating the Firewall
The Sophos XGS 87w operates as a next-generation firewall, providing comprehensive security features. Key operational aspects include:
- Network Protection: Utilizes advanced threat protection, intrusion prevention, and web filtering.
- Wireless Connectivity: Provides Wi-Fi access (802.11ac, 802.11ax) for wireless devices.
- Traffic Management: Manages network traffic flow and prioritizes critical applications.
- Reporting: Generates reports on network activity and security events.
5.1 Protection Modules and Licensing
The Sophos XGS 87w supports various protection modules that can be customized based on your security needs. These modules enhance the firewall's capabilities in areas such as network protection, web protection, email protection, and advanced threat response. Licensing options determine the available features and duration of protection.

This image displays the various licensing options available for Sophos XGS series devices, detailing the features included in different protection bundles like Base License, Network Protection, Web Protection, Zero Day Protection, and Enhanced Support. It also lists additional protection modules such as Email Protection and Web Server Protection.

This image provides a detailed overview of the protection modules offered by Sophos, including Base Firewall, Network Protection, Web Protection, Email Protection, and Advanced Threat Protection. Each module's function, such as blocking unknown threats, exposing hidden risks, and automatically responding to incidents, is described.
6. Maintenance
To ensure optimal performance and security of your Sophos XGS 87w firewall, regular maintenance is recommended:
- Firmware Updates: Regularly check for and apply the latest firmware updates from the Sophos support portal to ensure you have the most current security features and bug fixes.
- Configuration Backups: Periodically back up your firewall configuration to prevent data loss in case of an unforeseen issue.
- Security Policy Review: Review your security policies and rules regularly to ensure they align with your current network requirements and threat landscape.
- Physical Inspection: Ensure the device is in a well-ventilated area and free from dust accumulation.
7. Troubleshooting
If you encounter issues with your Sophos XGS 87w, consider the following troubleshooting steps:
- No Power: Verify the power adapter is securely connected to both the device and a working power outlet. Check the power LED on the front panel.
- No Network Connectivity: Check Ethernet cable connections to the WAN and LAN ports. Ensure your modem/router is functioning correctly. Verify link/activity LEDs on the front panel.
- Wi-Fi Issues: Ensure the wireless antennas are properly attached. Check Wi-Fi settings in the management interface.
- Device Unresponsive: If the device is unresponsive, try performing a soft reboot through the management interface. If inaccessible, use the reset button on the rear panel (refer to the Quick Start Guide for specific reset procedures, as this may revert to factory defaults).
- Consult Documentation: For more detailed troubleshooting, refer to the comprehensive documentation available on the Sophos support website.
8. Specifications
The following table outlines the technical specifications for the Sophos XGS 87w firewall.

This image provides detailed technical specifications for the Sophos XGS 87w, including firewall throughput, IPS throughput, concurrent connections, wireless specifications (number of antennas, MIMO capabilities, wireless interface), physical interfaces (ports, SFP), physical specifications (dimensions, weight), power consumption, operating temperature, humidity, and certifications.
| Feature | Specification |
|---|---|
| Model | XGS 87w |
| Firewall Throughput | 3,700 Mbps |
| IPS Throughput | 1,015 Mbps |
| Threat Protection Throughput | 490 Mbps |
| Concurrent Connections | 1,600,000 |
| New Connections/sec | 35,700 |
| IPsec VPN Throughput | 375 Mbps |
| Xstream SSL/TLS Inspection | 375 Mbps |
| Wireless Interface | 802.11a/b/g/n/ac (2.4 GHz / 5 GHz) |
| Number of Ports | 7 (1x COM RJ45, 1x Micro-USB, 4x 2.5 GE, 1x SFP) |
| Dimensions (HxWxD) | 230 x 44 x 205.5 mm |
| Weight | 1.36 kg / 3 lbs (unpacked) |
| Power Supply | External auto-ranging AC-DC 100-240V, 50-60Hz |
| Operating Temperature | 0°C to 40°C (32°F to 104°F) |
| Humidity | 10% to 90%, non-condensing |
For a complete list of specifications and performance test methodology, refer to the official Sophos documentation.

This image presents a product matrix for the Sophos XGS Series Appliances, comparing various models based on form factor, ports/slots, Wi-Fi model, swappable components, and throughput metrics like Firewall, IPsec VPN, Threat Protection, and Xstream SSL/TLS. The XGS 87w is included in this comparison.
9. Warranty and Support
The Sophos XGS 87w typically includes a 1-year standard protection plan. For detailed warranty information, including terms and conditions, please refer to the warranty documentation provided with your product or visit the official Sophos website.
For technical support, product registration, and access to the latest software and documentation, please visit the Sophos Support Portal.