Sophos Unveils Network Security Innovations with 4X Faster Throughput to Combat AI-Era Threats

Sophos Addresses Growing Network Security Demands in the AI Era

Sophos announced new network security innovations centered on Sophos Firewall v23, alongside new XGS hardware, a standalone Sophos NDR offering, and enhancements across its broader network portfolio1

1

2

2

. These innovations drive stronger AI-era network defenses through Sophos Fusion, the AI-native cybersecurity defense system, enabling organizations to meet performance and protection demands both today and into the future.

The evolving threat landscape reflects how AI is fundamentally changing network usage patterns and attack methodologies. Users, applications, devices, cloud services, and AI systems now generate significantly more traffic and machine-to-machine communication. Simultaneously, attackers leverage AI to accelerate reconnaissance, exploitation, and lateral movement across networks1

1

. Research from Sophos' 2026 State of Ransomware report reveals that in India, 60% of organizations hit by ransomware had their data encrypted, surpassing the 56% global rate2

2

.

Sophos Firewall v23 Delivers Enhanced Management and AI Controls

Sophos Firewall v23 anchors the launch with enhancements designed to simplify management, automation, and scaling of network security operations. Integration with Sophos AI Defense provides network-level visibility, reporting, and policy enforcement for AI service use1

1

. This includes controls that help organizations sanction trusted generative AI tools while blocking unapproved services. An AI Assistant helps administrators understand firewall configurations and draft rules for review, while a modern REST API supports greater automation for IT teams, partners, and MSPs2

2

.

Daniel Cole, senior vice president of product management at Sophos, emphasized the dual challenge organizations face: "AI is raising the stakes for the network. Organizations need to support more encrypted traffic, applications, and automated activity while defending against attacks that can move faster and exploit gaps at greater scale. Customers should not have to choose between enabling innovation and strengthening protection"1

1

.

High Availability and Security Foundation Strengthened

The release strengthens resilience through hardware-aware high availability that delivers 13X faster failover detection, reducing the detection window from four seconds to 300 milliseconds2

2

. Additional enhancements include DNS over HTTPS, DNSSEC, greater network visibility into applied CVE hotfixes and security updates, and further platform hardening as part of Sophos' Secure by Design foundation1

1

.

XGS Hardware Delivers Up to 4X Higher Protected Throughput

Four new XGS Series 1U appliances address escalating performance and protection demands. The XGS 2380, XGS 3380, XGS 4580, and XGS 5580 deliver up to 4X higher protected throughput than earlier 1U models2

2

. The lineup provides up to 59 Gbps threat protection throughput, up to 16 Gbps TLS inspection throughput, and port speeds of up to 25 Gbps on the XGS 3380 and above1

1

.

Standalone Sophos NDR Enables Active Threat Response

The new standalone Sophos NDR offering combines behavioral detection with deep packet inspection and IDS/IPS capabilities to strengthen real-time threat detection1

1

. Its Active Inline mode can drop identified malicious packets before they reach their destination, moving NDR beyond visibility to direct coordinated response. A new Sophos NDR 5500 hardware appliance will support these capabilities across increasingly complex environments2

2

.

Sophos Fusion Enables Coordinated Defense Against AI-Driven Threats

Sophos' approach to securing AI-era networks rests on two pillars: performance that scales with rising demands and integrated defenses rooted in Sophos Synchronized Security1

1

. Sophos Fusion brings security across the broader environment, enabling control points to share information in real time and execute a coordinated response to threats. Network signals, such as firewall alerts, shared with other control points can help turn visibility into coordinated containment before encryption occurs, addressing the critical window where cyberattacks escalate2

2

.