Purchasing Sophos on Azure

Try for Free

Sophos Firewall on Azure

You can purchase Sophos Firewall as a pre-configured virtual machine (VM) image. VM images are available from the Azure Marketplace. VMs come in a variety of types and sizes, similar to selecting different option sizes for hardware appliances in the on-premises world. You can launch and use Sophos Firewall on Azure, and either pay-as-you-go, or you can bring your own license (BYOL).



You will incur
a charge for:

  • Time you spend running Sophos Firewall on Azure.
  • Hourly pricing of the VM you selected to power Sophos Firewall on Azure software.

Launch Sophos Firewall on Azure and pay only for what you use, when you use it. No upfront commitment. No minimum fee. And you can delete your Sophos Firewall at any time.

Seasonal compute workloads that often experience high utilization during peak times of the year, but low utilization during off-peak times (such as tax or retail websites), may find PAYG advantageous. You can scale the capacity of your Sophos Firewall up or down as needed while paying only for what you use.

Current PAYG licensing

PAYG for Sophos Firewall is limited to Microsoft Remittance Countries, which are subject to the terms and conditions of the Microsoft Azure Marketplace Publisher Agreement. You can refer to Remittance Countries for a full list of countries where Sophos Firewall is available via PAYG.


When you PAYG, Sophos Firewall comes preconfigured with FullGuard, meaning your Firewall solution is enabled with all available security modules, including Network Protection, Web Protection, and more. If Enhanced Plus Support is desired, please consider BYOL, as described below.



Bring Your Own License

You will incur
a charge for:

  • Hourly pricing of the VM you selected to power the Sophos Firewall on Azure software.

When you BYOL, you bring a standard Sophos Firewall software license that you purchased from an authorized Sophos reseller. These licenses are configurable. You can select a term of one, two, or three years. You can also select any number of software subscriptions, including Network Protection, Web Protection, and Sandstorm.

You will not be charged again for the license you bring, but your license is required in order to benefit from your entitlements.

Server Protection on Azure

Server Protection is offered under BYOL. Server Protection runs on VMs in Azure environments, but it is not sold through the Azure Marketplace. Server Protection licenses are sold by authorized Sophos resellers. When you purchase a Server Protection license you apply it through Sophos Central.