How to buy Sophos Firewall
Choose the deployment option that works best for you
XGS Series appliances
Select from our extensive range of high-performance XGS Series firewall appliances powered by Sophos Xstream.
Cloud
Protect your cloud and hybrid networks with Sophos Firewall using our pay-as-you-go (PAYG) or bring-your-own-license (BYOL) option.
Buy now on AWS
Buy now on Azure
Virtual or software
Deploy using your preferred virtual environments, including VMware, Microsoft Hyper-V, Citrix, and KVM. Or deploy a software image on your own Intel hardware.
If you already work with a trusted Sophos Partner or MSP or are a new customer and want to take advantage of preferred pricing, submit a quote request.
Xstream Firewall Protection Bundle
The Sophos Firewall Xstream Protection Bundle provides all the next-gen protection, performance, and value you need to power the most demanding networks.
| Module | What’s included |
|---|---|
| Base License | Networking, wireless, Xstream architecture, unlimited remote-access VPN, site-to-site VPN, reporting |
| Network Protection | Xstream TLS and DPI Engine, intrusion prevention system (IPS), Sophos Active Threat Response with Sophos X-Ops threat feeds, Security Heartbeat™, SD-RED management, reporting |
| Web Protection | Xstream TLS and DPI Engine, web security and control, application control, reporting |
| Zero-Day Protection | Machine learning, sandboxing, file analysis, reporting |
| Central Orchestration | SD-WAN/VPN orchestration, Central Firewall Reporting Advanced (30 days1), MDR/XDR data lake connector |
| DNS Protection (not sold separately) | High-performance, cloud-based DNS protection for website compliance and security |
| Bundle-only features (not sold separately) | Active Threat Response with MDR/XDR threat feeds and third-party threat feeds |
| Enhanced Support | 24/7 support, feature updates, advanced replacement hardware warranty for term2 |
All the protection modules shown above are also available for individual purchase, except DNS Protection, which can only be purchased as part of the Xstream Protection bundle. You can also add Email Protection, Web Server Protection, and an Enhanced Plus Support upgrade, all sold separately. To learn more about these modules, download the Sophos Firewall brochure.
1 30-day calculation is based on the average traffic volumes for each firewall appliance size. In higher-than-average traffic environments, the report retention rate may be lower.
2 For active/passive high-availability (HA) configurations, the primary appliance must have an Enhanced Plus Support contract to entitle the passive appliance to advanced RMA.
Options and accessories
Sophos Firewall is part of the world’s best cybersecurity ecosystem, enabling you to easily extend your network, protection, and team capabilities.
Extend your network
- ZTNA – Zero Trust Network Access for remote workers ($ Opt)
- SD-RED – Edge branch-office devices ($ Opt)
- Switches and wireless – cloud-managed LAN connectivity ($ Opt)
Extend your protection
- Endpoint/Intercept Xwith EDR/XDR – Synchronized Security™ ($ Opt)
- Central Email Advanced – Cloud email protection ($ Opt)
- Cloud Optix – Public cloud visibility and response ($ Opt)
Extend your team
- Sophos Central – Central management (no charge)
- Central Firewall Reporting Advanced – reporting and analytics ($ Opt)
- Managed Detection and Response (MDR) – 24/7 managed service ($ Opt)
Request a quote to pave the way to your new Sophos Firewall and these benefits:
- Simple pricing – Select a Sophos protection bundle, which includes the virtual/hardware appliance of your choice plus all the security services you need
- Cloud-based – Firewall management and selected reporting options come at no extra cost
- More than a firewall – Our add-ons provide easy options for plug-and-play, site-to-site connectivity, Wi-Fi access, and much more
Submit the form to get your quote.
