In short
A Sophos Flexi Port module slots into the expansion bay of an XGS rackmount firewall to add ports: 8-port GE copper or SFP, 4-port 10 GE SFP+, PoE, bypass and 40 GE QSFP+ modules, with a high-density module for the 2U models. Forever Systems, a Sophos MSP Partner, can quote the module that fits your XGS model.
Order the Sophos accessories
Add products and licences to your basket, then check out when you are ready.
Flexi Port modules and the XGS models they fit
| Accessory | Part number | Fits (Sophos) |
|---|---|---|
| 8-port GE copper Flexi Port module | XSBZTCHC8 | Fits every XGS rackmount model (1U and 2U) |
| 8-port GE SFP Flexi Port module | XSBZTCHF8 | Fits every XGS rackmount model (1U and 2U) |
| 4-port 10 GE SFP+ Flexi Port module | XSAZTCHF4 | Fits every XGS rackmount model (1U and 2U) |
| 4-port GE copper bypass Flexi Port module | XSAZTCHC6 | Fits every XGS rackmount model (1U and 2U) |
| 4-port GE PoE and 4-port GE copper Flexi Port module | XSAZTCHC8 | Fits XGS 2100, 2300, 3100, 3300, 4300 and 4500; 4 PoE ports, 60 W per module |
| 4-port 2.5 GE PoE Flexi Port module | XSBZTCHC4 | Sophos lists it for XGS 2000, 3000 and 4000 Series models; 4 PoE ports, 60 W per module |
| 2-port GE fibre bypass and 4-port GE SFP Flexi Port module | XSBZTCHF6 | Fits every XGS rackmount model except the XGS 2380, 3380, 4580 and 5580 |
| 2-port 10 GE NBASE-T and 2-port 10 GE SFP+ Flexi Port module | HM2N2S00ZZPCAA | Fits every XGS 1U model |
| 2-port 10 GE fibre bypass Flexi Port module | HM2PBP00ZZPCAA | Fits the XGS 4580 and 5580 |
| 1-port 40 GE QSFP+ Flexi Port module | HM1PQS00ZZPCAA | Fits the XGS 4580 and 5580 |
| 2-port 40 GE QSFP+ Flexi Port module | XSBZTCHF2 | Fits the XGS 2U models (5500, 6500, 7500 and 8500) |
| 8-port 10 GE SFP+ Flexi Port module | XSAZTCHF8 | Fits the XGS 2U models (5500, 6500, 7500 and 8500) |
| 2-port 10 GE fibre bypass and 4-port 10 GE SFP+ Flexi Port module | XSAZTCHF6 | Fits the XGS 2U models (5500, 6500, 7500 and 8500) |
| High-Density 12-port 1G and 4-port 2.5G copper Flexi Port module | XSAZTCHC4 | Fits the XGS 2U models: one bay on the XGS 5500, two on the XGS 6500, 7500 and 8500 |
From the accessory tables in Sophos's firewall brochure, with the order codes from Sophos's UK list. The 1U models have one Flexi Port bay (XGS 2100, 2300, 3100, 3300, 2380 and 3380) or two (XGS 4300, 4500, 4580 and 5580); the 2U models have two, plus one or two bays for the High-Density module. We check the module against your appliance when we quote.
Add the Sophos accessories to your basket
Add it and anything else you need, then check out when you are ready.
Power, 5G and mounting for XGS firewalls
| Accessory | Part number | Fits (Sophos) |
|---|---|---|
| 5G module for XGS desktop (Gen.2) | HM5G2W00ZZPCAA | Fits the XGS 118, 118w, 128, 128w and 138 |
| Second power supply for XGS desktop | Confirmed at quote | Fits the XGS 108, 108w, 118, 118w, 128, 128w and 138 |
| Rackmount kit for XGS 88 and 108 | MKAHD300ZZPCNP | Fits the XGS 88, 88w, 108 and 108w |
| Rackmount kit for XGS 118, 128 and 138 | Confirmed at quote | Fits the XGS 118, 118w, 128, 128w and 138 |
| External redundant power supply for XGS 1U | XSXZT2HEUK | Fits the XGS 2100, 2300, 3100, 3300 and 4300 |
| Internal power supply for XGS 2380 and 3380 | PWXN0100ZZPCNP | Fits the XGS 2380 and 3380 as the optional redundant power supply |
| Redundant power supply for XGS 4500 | XS4ETCHPS | Fits the XGS 4500 |
| Internal power supply for XGS 4580 and 5580 | PWXN0200ZZPCNP | Fits the XGS 4580 as the optional redundant power supply; a spare for the XGS 5580 |
| Sliding rails for XGS 1U | RMSZTCH1U | Fits the XGS 2100, 2300, 3100, 3300, 2380 and 3380 |
The XGS 5580 includes its internal redundant power supply, and the 2U models have redundant power built in. Sliding rails are included with the XGS 4300, 4500, 4580 and 5580 and every 2U model. The internal power supplies for the XGS 2380, 3380, 4580 and 5580 are supplied without a power cord.
Sophos Switch and AP6 accessories
| Accessory | Part number | Fits (Sophos) |
|---|---|---|
| Sliding rails for Sophos Switch | Confirmed at quote | Optional for rackmount Sophos Switch models; rack-mount brackets come with every switch |
| AP6 plenum and flat-ceiling mounting bracket kit | MKMBAP00ZZPCAA | Fits the indoor AP6 models (AP6 420, 420E, 840 and 840E) |
| AP6 suspend mounting kit | MKSZAP00ZZPCAA | Fits the indoor AP6 models (AP6 420, 420E, 840 and 840E) |
| External power supply for AP6 420 | AP420Z00ZZPCMR | Fits the AP6 420 |
| PoE+ injector, 30 W | PO2ZTCHUK | Powers one 802.3at access point from a switch port without PoE |
| PoE++ injector, 60 W | PW60WZ00ZZPCUK | Powers one 802.3bt access point, such as the AP6 840E, from a switch port without PoE |
| 120 degree sector antenna for AP6 420X | ANTZTCHAA | Fits the outdoor AP6 420X |
| 30 degree directional antenna for AP6 420X | ANTZTCHAB | Fits the outdoor AP6 420X |
Every indoor AP6 already comes with a bracket for desktop, wall or ceiling mounting, and the AP6 420X with its pole and wall bracket and omnidirectional antennas.
Not sure what you need?
Tell us about your sites and we will recommend the right kit and licences.
Sophos accessories models and part numbers
Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.
| Part number | Model | Vendor description | Key specs | Status | Basket |
|---|---|---|---|---|---|
| XSBZTCHC8 | 8-port GE copper Flexi Port module | Sophos Firewall XGS Flexi Port module: 8-port GE copper | Fits every XGS rackmount model (1U and 2U) | Current | |
| XSBZTCHF8 | 8-port GE SFP Flexi Port module | Sophos Firewall XGS Flexi Port module: 8-port GE SFP | Fits every XGS rackmount model (1U and 2U) | Current | |
| XSAZTCHF4 | 4-port 10 GE SFP+ Flexi Port module | Sophos Firewall XGS Flexi Port module: 4-port 10 GE SFP+ | Fits every XGS rackmount model (1U and 2U) | Current | |
| XSAZTCHC6 | 4-port GE copper bypass Flexi Port module | Sophos Firewall XGS Flexi Port module: 4-port GE copper bypass (2 pairs) | Fits every XGS rackmount model (1U and 2U) | Current | |
| XSAZTCHC8 | 4-port GE PoE and 4-port GE copper Flexi Port module | Sophos Firewall XGS Flexi Port module: 4-port GE copper PoE and 4-port GE copper | Fits XGS 2100, 2300, 3100, 3300, 4300 and 4500; 4 PoE ports, 60 W per module | Current | |
| XSBZTCHC4 | 4-port 2.5 GE PoE Flexi Port module | Sophos Firewall XGS Flexi Port module: 4-port 2.5 GE copper PoE | Sophos lists it for XGS 2000, 3000 and 4000 Series models; 4 PoE ports, 60 W per module | Current | |
| XSBZTCHF6 | 2-port GE fibre bypass and 4-port GE SFP Flexi Port module | Sophos Firewall XGS Flexi Port module: 2-port GE fibre (LC) bypass and 4-port GE SFP | Fits every XGS rackmount model except the XGS 2380, 3380, 4580 and 5580 | Current | |
| HM2N2S00ZZPCAA | 2-port 10 GE NBASE-T and 2-port 10 GE SFP+ Flexi Port module | Sophos Firewall XGS Flexi Port module: 2-port 10 GE NBASE-T copper and 2-port 10 GE SFP+ | Fits every XGS 1U model | Current | |
| HM2PBP00ZZPCAA | 2-port 10 GE fibre bypass Flexi Port module | Sophos Firewall XGS Flexi Port module: 2-port 10 GE fibre (LC) bypass | Fits the XGS 4580 and 5580 | Current | |
| HM1PQS00ZZPCAA | 1-port 40 GE QSFP+ Flexi Port module | Sophos Firewall XGS Flexi Port module: 1-port 40 GE QSFP+ | Fits the XGS 4580 and 5580 | Current | |
| XSBZTCHF2 | 2-port 40 GE QSFP+ Flexi Port module | Sophos Firewall XGS Flexi Port module: 2-port 40 GE QSFP+ | Fits the XGS 2U models (5500, 6500, 7500 and 8500) | Current | |
| XSAZTCHF8 | 8-port 10 GE SFP+ Flexi Port module | Sophos Firewall XGS Flexi Port module: 8-port 10 GE SFP+ | Fits the XGS 2U models (5500, 6500, 7500 and 8500) | Current | |
| XSAZTCHF6 | 2-port 10 GE fibre bypass and 4-port 10 GE SFP+ Flexi Port module | Sophos Firewall XGS Flexi Port module: 2-port 10 GE fibre (LC) bypass and 4-port 10 GE SFP+ | Fits the XGS 2U models (5500, 6500, 7500 and 8500) | Current | |
| XSAZTCHC4 | High-Density 12-port 1G and 4-port 2.5G copper Flexi Port module | Sophos Firewall XGS High-Density Flexi Port module (NIC): 12-port 1G copper and 4-port 2.5G copper | Fits the XGS 2U models: one bay on the XGS 5500, two on the XGS 6500, 7500 and 8500 | Current | |
| HM5G2W00ZZPCAA | 5G module for XGS desktop (Gen.2) | Sophos Firewall XGS 5G module (Gen.2) | Fits the XGS 118, 118w, 128, 128w and 138 | Current | |
| Confirmed at quote | Second power supply for XGS desktop | Sophos Firewall XGS desktop second (redundant) power supply | Fits the XGS 108, 108w, 118, 118w, 128, 128w and 138 | Current | |
| MKAHD300ZZPCNP | Rackmount kit for XGS 88 and 108 | Sophos Firewall XGS 88 and 108 rackmount kit with adapter holder | Fits the XGS 88, 88w, 108 and 108w | Current | |
| Confirmed at quote | Rackmount kit for XGS 118, 128 and 138 | Sophos Firewall XGS 118, 128 and 138 rackmount kit | Fits the XGS 118, 118w, 128, 128w and 138 | Current | |
| XSXZT2HEUK | External redundant power supply for XGS 1U | Sophos Firewall XGS 1U external redundant power supply | Fits the XGS 2100, 2300, 3100, 3300 and 4300 | Current | |
| PWXN0100ZZPCNP | Internal power supply for XGS 2380 and 3380 | Sophos Firewall XGS 2380 and 3380 internal power supply (spare, without power cord) | Fits the XGS 2380 and 3380 as the optional redundant power supply | Current | |
| XS4ETCHPS | Redundant power supply for XGS 4500 | Sophos Firewall XGS 4500 redundant power supply | Fits the XGS 4500 | Current | |
| PWXN0200ZZPCNP | Internal power supply for XGS 4580 and 5580 | Sophos Firewall XGS 4580 and 5580 internal power supply (spare, without power cord) | Fits the XGS 4580 as the optional redundant power supply; a spare for the XGS 5580 | Current | |
| RMSZTCH1U | Sliding rails for XGS 1U | Sophos Firewall XGS 1U sliding rails | Fits the XGS 2100, 2300, 3100, 3300, 2380 and 3380 | Current | |
| Confirmed at quote | Sliding rails for Sophos Switch | Sophos Switch sliding rails | Optional for rackmount Sophos Switch models; rack-mount brackets come with every switch | Current | |
| MKMBAP00ZZPCAA | AP6 plenum and flat-ceiling mounting bracket kit | Sophos AP6 mounting bracket kit for plenum and flat-ceiling mounting | Fits the indoor AP6 models (AP6 420, 420E, 840 and 840E) | Current | |
| MKSZAP00ZZPCAA | AP6 suspend mounting kit | Sophos AP6 suspend mounting kit | Fits the indoor AP6 models (AP6 420, 420E, 840 and 840E) | Current | |
| AP420Z00ZZPCMR | External power supply for AP6 420 | Sophos AP6 420 external power supply | Fits the AP6 420 | Current | |
| PO2ZTCHUK | PoE+ injector, 30 W | Sophos Gigabit/2.5G PoE+ injector (802.3af/at, 30 W), UK power cord | Powers one 802.3at access point from a switch port without PoE | Current | |
| PW60WZ00ZZPCUK | PoE++ injector, 60 W | Sophos Gigabit/2.5G PoE++ injector (802.3bt, 60 W), UK power cord | Powers one 802.3bt access point, such as the AP6 840E, from a switch port without PoE | Current | |
| ANTZTCHAA | 120 degree sector antenna for AP6 420X | Sophos AP6 420X 120 degree sector antenna | Fits the outdoor AP6 420X | Current | |
| ANTZTCHAB | 30 degree directional antenna for AP6 420X | Sophos AP6 420X 30 degree directional antenna | Fits the outdoor AP6 420X | Current | |
| HA1BSF00ZZPCAA | 1000Base-SX fibre transceiver | Sophos 1000Base-SX fibre transceiver (SFP) | 1G multimode fibre link from an SFP port | Current | |
| HA1BLF00ZZPCAA | 1000Base-LX fibre transceiver | Sophos 1000Base-LX fibre transceiver (SFP) | 1G single-mode fibre link from an SFP port | Current | |
| HA1BCT00ZZPCAA | 1000Base-T copper transceiver | Sophos 1000Base-T copper transceiver (SFP) | 1G copper (RJ45) link from an SFP port | Current | |
| HAGBSF00ZZPCAA | Dual-rate 10GBase-SR fibre transceiver | Sophos dual-rate 10GBase-SR 10 GbE fibre transceiver (SFP+) | 10G multimode fibre link from an SFP+ port | Current | |
| HAGBLF00ZZPCAA | Dual-rate 10GBase-LR fibre transceiver | Sophos dual-rate 10GBase-LR 10 GbE fibre transceiver (SFP+) | 10G single-mode fibre link from an SFP+ port | Current |
Sophos transceivers
| Accessory | Part number | Use |
|---|---|---|
| 1000Base-SX fibre transceiver | HA1BSF00ZZPCAA | 1G multimode fibre link from an SFP port |
| 1000Base-LX fibre transceiver | HA1BLF00ZZPCAA | 1G single-mode fibre link from an SFP port |
| 1000Base-T copper transceiver | HA1BCT00ZZPCAA | 1G copper (RJ45) link from an SFP port |
| Dual-rate 10GBase-SR fibre transceiver | HAGBSF00ZZPCAA | 10G multimode fibre link from an SFP+ port |
| Dual-rate 10GBase-LR fibre transceiver | HAGBLF00ZZPCAA | 10G single-mode fibre link from an SFP+ port |
Sophos sells transceivers separately from its firewalls and switches. The 1G modules go in SFP ports and the dual-rate 10G modules in SFP+ ports; the configurator offers the ones that match a model's ports when you add it. For SFP28, QSFP and DAC links, tell us each link's speed and distance and we add the matching parts to your quote.
How to order
How ordering works. Press Add next to a model and it goes into your basket; where a protection bundle or support subscription goes with the hardware, you pick it in the same step or skip it. Then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the network as a project, with the scope confirmed at quote (see network installation). Every row shows the Sophos UK order code, and your quote confirms the exact part number for each appliance, subscription and term.
Vendor sources
How we can help with your network
Forever Systems can design, supply, stage, install and configure the network around the hardware you buy here, as a project or one step at a time.
- Design: we look at your sites, users and existing kit and size the switches, wireless and firewalls to fit
- Supply: every order gets a personalised quote by part number, with the subscriptions and support each product needs
- Stage: we can pre-configure and label equipment before it reaches site
- Install: we can rack and mount switches, access points and firewalls on site
- Configure: VLANs, wireless, firewall policy, VPNs and management platforms set up and documented at handover
Scope is confirmed at quote, so you only pay for the parts of the project you need.
Frequently asked questions
What is a Sophos Flexi Port module?
A plug-in port module for the expansion bay of a Sophos Firewall XGS rackmount appliance. It adds copper, fibre, PoE or bypass ports without changing the firewall.
Which Sophos XGS models take Flexi Port modules?
Every 1U and 2U model. The 1U models have one or two bays; the 2U models have two, plus bays for the High-Density module. The desktop models take the 5G module (XGS 118, 128 and 138) instead.
Is there a PoE Flexi Port module?
Yes: a module with four GE PoE ports and four GE copper ports, 60 W per module, for the XGS 2100, 2300, 3100, 3300, 4300 and 4500.
What is the part number of the Sophos XGS 5G module?
HM5G2W00ZZPCAA is the Gen.2 5G module for the expansion bay of the XGS 118, 118w, 128, 128w and 138.
Does Sophos sell its own SFP transceivers?
Yes: 1000Base-SX, 1000Base-LX and 1000Base-T modules for SFP ports and dual-rate 10GBase-SR and 10GBase-LR modules for SFP+ ports, each listed above with its part number.
Can I add a second power supply to a Sophos XGS?
Yes on most models: a second power supply for the XGS 108 to 138 desktop models, an external unit for the XGS 2100 to 3300 and 4300, and an internal unit for the XGS 2380, 3380, 4500 and 4580.
Ready to order?
Build your basket and check out when you are ready.
More sophos
See all- Sophos XGSSophos
23 models: XGS 88, XGS 88w, XGS 108, XGS 108w, XGS 2100, XGS 2300, XGS 3100, XGS 3300, XGS 5500, XGS 6500, XGS 7500, XGS 8500

