Sophos Launches Firewall v23 and Four XGS Appliances
The release adds AI governance tools, faster failover and a standalone network detection offering for enterprise networks.
Updated on Nov. 5, 2026 in Cybersecurity
Sophos has launched Sophos Firewall v23 along with four new 1U XGS Series appliances. The company also introduced a standalone Network Detection and Response offering, scheduled for general availability from November 10, 2026.
Why it matters
AI is increasing network traffic, encrypted communications and machine-to-machine activity, while enabling attackers to speed up reconnaissance, exploitation and lateral movement. Sophos positions the update as a response to those pressures on network security teams.
The new XGS appliances offer up to 59 Gbps of threat protection throughput and 16 Gbps of TLS inspection, with port speeds reaching 25 Gbps on the XGS 3380 and higher models. These are vendor-reported specifications, and independent benchmarks were not referenced in the source.
The players
Sophos
Sophos is a British cybersecurity company known for firewall, endpoint and network security products sold to businesses worldwide.
The details
Sophos Firewall v23 integrates with Sophos AI Defense to provide network-level visibility into AI services and lets administrators identify and control generative AI tool use. An AI Assistant drafts firewall rules for administrator review, and the release adds a REST API, DNS over HTTPS, DNSSEC and improved visibility into CVE hotfixes. Sophos NDR combines behavioural detection, deep packet inspection and IDS/IPS, with an Active Inline mode that drops identified malicious packets before they reach their destination.
Timeline
November 5, 2026: Sophos announces Firewall v23 and the new XGS appliances.
November 10, 2026: Sophos NDR is scheduled for general availability.
The Tech Race
The release extends Sophos Fusion, the company's shared-intelligence platform, by synchronising web policies across workspace protection and linking firewalls, NDR, wireless and switching products. It positions Sophos to compete on integrated, cloud-managed network security rather than standalone appliances.
Administrators can use the AI Assistant to draft firewall rules for review, which may reduce manual configuration work. The reported failover improvement means a faster switch to backup capacity if a primary device fails.
The takeaway
Network teams facing AI-driven traffic growth should review how firewall, detection and policy tools share intelligence across their environment. Verifying vendor performance claims in a test setting before purchase remains advisable.
What happens next
Sophos NDR is scheduled for general availability from November 10, 2026.
Further reading
For more on how network defenders are adapting, see our Cybersecurity coverage.
