Sophos SG 650
Unleash the full potential of your network

Compare Models:

This is what you get with every Sophos SG Series firewall:

• The latest Intel multi-core technology for optimal performance and efficiency
• The same security features available on every size of appliance
• Built-in HDD or SSD as storage for local quarantine data, logs and reporting
• FleXi Port modules available for all 1U and 2U appliances (interchangeable within a range, e.g. 1U)
• Free Sophos UTM Manager (SUM) to manage multiple appliances
• Possibility to dynamically cluster up to 10 appliances of the same kind - without external load balancers

Deployment:

These 2U firewalls offer the ultimate in performance and connectivity for the most demanding deployment scenarios. The following diagram shows a typical deployment in this range and demonstrates their scalability which is ideally suited for larger distributed organizations.

Deployment scenario showing a cluster of two SG 650 appliances as part of a large distributed organization with Sophos REDs to protect small or home offices and other SG appliances to protect branch offices

Specifications:

The Sophos SG 550 and SG 650 are high-performance firewalls equipped to provide protection for larger distributed organizations and data center environments. They offer the fastest Intel CPU technology available today to effortlessly handle use as an all-inone solution or a powerful next-generation firewall. The models offer either 3 (SG 550) or 4 (SG 650) FleXi Port expansion bays to tailor your connectivity to your environment. An 8 port GbE copper module is supplied as a default. Hot-swappable dual SSDs and power supplies are standard redundancy features in this class. Cluster up to 10 of these appliances for larger deployments or simply add an additional appliance as a failover for high availability.

SG Series Appliances: SG 550, SG 650
Front View SG 550	Performance	SG 550	SG 650
	Firewall throughput	40 Gbps	60 Gbps
	VPN throughput	8 Gbps	10 Gbps
	IPS throughput	12 Gbps	16 Gbps
	Antivirus throughput (proxy)	3.5 Gbps	5 Gbps
	Concurrent connections	12,000,000	20,000,000
	New connections/sec	200,000	220,000
	Maximum licensed users	unrestricted	unrestricted
Front View SG 650	Physical interfaces
	Hard drive (local quarantine/logs)	2 x integrated hotswap SSD (RAID)	2 x integrated hotswap SSD (RAID)
	Ethernet interfaces (fixed)	8 GE copper	8 GE copper
	No. of FleXi Port slots	3	4
	FleXi Port modules (optional)	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+
	I/O ports	2 x USB 2.0 (front) 2 x USB 2.0 (rear) 2 x Mgmt Port (eth0/eth1, front) 1 x COM (RJ45) (front) 1 x VGA (rear)	2 x USB 2.0 (front) 2 x USB 2.0 (rear) 2 x Mgmt Port (eth0/eth1, front) 1 x COM (RJ45) (front) 1 x VGA (rear)
	Display	Multi-function LCD module	LCD module Multi-function
	Power supply	2 x hot-swap internal auto-ranging 100-240VAC, 48-62 Hz PSU	2 x hot-swap internal auto-ranging 100-240VAC, 48-62 Hz PSU

How to Buy:

Three simple steps will get you complete security with Sophos UTM

• Choose How To Deploy
  Hardware, software, virtual or cloud-based appliance
• Choose Your License
  Choose pre-packaged licenses or license modules individually
• Choose to Extend Your Protection
  Plug in Sophos access points for Secure Wi-Fi and with Sophos RED extend protection to branch offices

You can read more about these steps below. And if you need help deciding what’s right for you, simply contact us. We’ll both be happy to help.

Choose How To Deploy

Choose the right appliance for your environment-is it hardware, software, virtual or even cloud-based?

• Hardware
  Our range of models fit any environment and are purpose-built to deliver high-performance. They integrate our security applications with a hardened operating system (OS) on optimized Intel-compatible server systems.
• Virtual
  Virtual appliances are certified as VMware Ready and Citrix Ready. They also run in Microsoft Hyper-V and KVM virtual environments.
• Software
  Easily installs on your existing hardware.
• Cloud-based appliances
  Using Amazon Virtual Private Cloud (VPC), you can run the appliance in the cloud. Or, you can use the Amazon VPC connector on the appliance at your office for secure and robust access to your Amazon-hosted resources.

Choose Your License

We give you the flexibility to license our protection modules individually. Or, you can choose one of our pre-packaged licenses. Whatever suits your needs.

Choose to Extend Your Protection

Choose the accessories you need to protect your branch offices and deploy secure Wi-Fi too:

• Sophos RED Secure your branch offices by forwarding all traffic to the central Sophos UTM. Installation requires no technical training and there is no ongoing maintenance.
• Wi-Fi Access Points Get secure Wi-Fi fast. Users are instantly protected by the UTM, and let you create secure mesh networks too.

Security Applications:

Our Linux-based OS includes a free Essential Network Firewall. It provides fundamental security like firewalling, networking tools, routing and secure remote access. And our modular approach lets you add layers of protection as your needs evolve.

UTM Network Protection stops sophisticated attacks that a firewall alone can’t stop.

• Configurable intrusion protection system and flood protection against denial of service attacks
• Sophos RED, IPsec and SSL tunnels provide flexible site-to-site and remote-access VPN connections

UTM Email Protection stops spam and viruses and keeps sensitive data safe.

• Let users manage their spam quarantine and search a personalized mail log
• Keep infected emails out of your mailbox and protect confidential emails against illegitimate access.

UTM Web Protection lets you protect your employees from web threats and control their time online.

• Limit use of unwanted applications while giving priority to business critical resources
• Create dynamic reports on the fly to check if your policy is working and make adjustments

UTM Webserver Protection hardens web servers and apps ensuring compliance with a web application firewall.

• Protect personally identifiable information like credit card and social security numbers
• Inspects information submitted via forms on your websites to prevent server exploits

UTM Wireless Protection gives you secure Wi-Fi in minutes.

• Centrally manage access points through the UTM's built-in wireless controller
• Easily set up wireless hotspots and grant guest access with a simple voucher-based system

UTM Endpoint Protection provides desktops, laptops, and servers with antivirus, device and web control.

• Scans files, webpages and devices blocking or cleaning threats
• Device control reduces the risk of data loss and malware by managing removable devices
• Built-in URL filtering ensures users get the same level of web protection outside of the office as they do inside

Add modules when you need them

Documentation:

Download the Sophos SG Series Data Sheet (PDF).