Buy Sophos Firewall | Get Pricing for Sophos XGS

How to buy Sophos Firewall

Choose the deployment option that works best for you

XGS Series appliances

Select from our extensive range of high-performance XGS Series firewall appliances powered by Sophos Xstream.

Request a quote

Compare XGS models

Cloud

Protect your cloud and hybrid networks with Sophos Firewall on AWS or Azure.

Buy now on AWS

Buy now on Azure

Virtual or software

Deploy using your preferred virtual environments, including VMware, Microsoft Hyper-V, Citrix, and KVM. Or deploy a software image on your own Intel hardware.

Request a quote

Sophos Partners

All Sophos products are sold via a network of resellers and Managed Service Providers. A qualified partner can help you with sizing to ensure you select the firewall that best suits your throughput requirements and your environment.

If you already work with a trusted Sophos Partner or MSP or are a new customer and want further pricing information, submit a quote request.

Sophos Firewall Licensing

We recommend purchasing your Sophos Firewall with an Xstream Protection or Xstream Plus bundle, as they offer the broadest protection and are regularly enhanced with new features (at no extra cost), increasing the value of your investment over the full lifecycle of your product.

Every Sophos Firewall requires a Base License.

Module	What’s included
Base License	Networking, wireless, Xstream architecture, unlimited remote-access VPN, site-to-site VPN, reporting, REST API

The Base License:

Is included in the purchase price of a hardware appliance
Needs to be purchased separately for virtual, software-only, or cloud deployments

While the Base License provides essential firewall functionality, a support subscription is required to keep your firewall up to date with firmware updates and to access Sophos Fusion management and reporting capabilities, as well as Sophos technical support.

Xstream Protection bundle

Xstream Protection provides all the next-gen protection, performance, and value you need to power the most demanding networks.

Module	What’s included
Network Protection	Xstream TLS and DPI Engine, intrusion prevention system (IPS), Sophos Active Threat Response with Sophos X-Ops threat feeds, Security Heartbeat™, SD-RED management, reporting
Web Protection	Xstream TLS and DPI Engine, web security and control, application control, reporting
Zero-Day Protection	Machine learning, sandboxing, file analysis, reporting
Central Orchestration	SD-WAN/VPN orchestration, Central Firewall Reporting Advanced (30 days¹), MDR/XDR data lake connector
DNS Protection (not sold separately)	High-performance, cloud-based DNS protection for website compliance and security
Bundle-only features (not sold separately)	Active Threat Response with MDR/XDR threat feeds and third-party threat feeds, NDR Essentials
Enhanced Support	24/7 support access, firmware updates, advanced replacement hardware warranty for term²

Xstream Plus

Available for term licenses with upfront purchases. Not available for MSP Flex.

Xstream Plus combines the comprehensive protection capabilities in Xstream Protection with secure access for remote and hybrid workers, and extended Firewall reporting and support.

Module	What’s included
Xstream Protection	Includes the full scope of Xstream Protection, plus the additional capabilities listed below
Sophos Workspace Protection	Protected Browser, ZTNA, DNS Protection for endpoints, Email Monitoring System. User license quantity varies by XGS model or virtual/SW license
Firewall Reporting in Central Orchestration	Up to 1 year of data retention storage² for centralized reporting in Sophos Fusion
Enhanced to Enhanced Plus Support upgrade	Advanced RMA for a passive device in HA, priority case and sample handling, 2-8 hours of remote consulting, VIP access to Technical Resource team

Xstream Plus: Included licenses

Xstream Plus includes the following license quantities based on the XGS Series hardware appliance or virtual license. Additional Workspace Protection licenses can be purchased separately.

Model or license	Sophos Workspace Protection user licenses	Firewall Reporting in Sophos Fusion* allocation for up to one year
XGS 87/88(w), 107/108(w)	5	5
XGS 116/118(w)	5	10
XGS 126/128(w), 136(w)/138	10	10
XGS 2100, 2300, 3100	25	10
XGS 2380, 3300, 3380, 4300, 4500	100	20
XGS 4580, 5500, 5580, 6500	300	50
XGS 7500, 8500	500	100
Virtual/SW: 1 or 2 cores	5	5
Virtual/SW: 4 cores	5	10
Virtual/SW: 6 or 8 cores	25	10
Virtual/SW: 16 cores	100	20
Virtual/SW: Unlimited cores	300	50

* Reporting allocations provide up to one year of data retention based on average traffic volumes per appliance size. Each license represents a storage block of 100 GB. In high-traffic environments, the retention period may be shorter.

All the protection modules shown above are also available for individual purchase, except DNS Protection, which can only be purchased as part of the Xstream Protection and Xstream Plus. You can also add Email Protection, Web Server Protection, and an Enhanced Plus Support upgrade (included in Xstream Plus), all sold separately. To learn more about these modules, download the Sophos Firewall brochure.

Important note: Support must be added to any individual module purchased (including the Base License) to be eligible for firmware updates and full customer support access.

¹ The up to 30-day (Xstream Protection) and up to 1-year (Xstream Plus) calculation is based on the average traffic volumes for each firewall appliance size. In higher-than-average traffic environments, the reporting retention rate may be lower.

² For active/passive high-availability (HA) configurations, the primary appliance must have an Enhanced Plus Support contract to entitle the passive appliance to advanced RMA.

Options and accessories

Sophos Firewall is part of Sophos Fusion, the industry’s most complete cyber defense system, enabling you to easily extend your network, protection, and team capabilities.

firewall protecting remote office diagram

Extend your network

To remote and hybrid workers with Sophos Workspace Protection (included in Xstream Plus).
To branch offices and remote locations with SD-RED plug-and-play edge devices.
To your network infrastructure with Sophos Switch and Sophos Wireless that support Active Threat Response and Sophos Fusion management.

Extend your protection

With Sophos Workspace Protection that includes our Protected Browser, ZTNA, DNS Protection, and Email Monitoring System.
With Sophos Endpoint to protect your devices from ransomware and other advanced cyberattacks.
With Sophos Email to defend against phishing and BEC attacks.

Extend your team

With Sophos Fusion management to streamline your day-to-day workflow.
With Firewall Reporting Advanced for deeper analytics and insights.
With Managed Detection and Response for 24/7 monitoring of your network by experts.

Contact Request: Content with Form - Background Image

Request a quote to pave the way to your new Sophos Firewall and these benefits:

Simple pricing – Select a Sophos protection bundle, which includes the virtual/hardware appliance of your choice plus all the security services you need
Cloud-based – Firewall management and selected reporting options come at no extra cost for licensed customers
More than a firewall – Our add-ons provide easy options for plug-and-play, site-to-site connectivity, Wi-Fi access, and much more

Submit the form to get your quote.

Sophos Firewall reviews

in Gartner Peer Insights, 2024, Network Firewalls

4.7

842 Ratings

Downloads
Sophos Firewall and XGS Series Brochure
Sophos Firewall Solution Brief
Sophos Firewall Security Brief

Xstream Protection bundle

Xstream Protection provides all the next-gen protection, performance, and value you need to power the most demanding networks.

Module	What’s included
Network Protection	Xstream TLS and DPI Engine, intrusion prevention system (IPS), Sophos Active Threat Response with Sophos X-Ops threat feeds, Security Heartbeat™, SD-RED management, reporting
Web Protection	Xstream TLS and DPI Engine, web security and control, application control, reporting
Zero-Day Protection	Machine learning, sandboxing, file analysis, reporting
Central Orchestration	SD-WAN/VPN orchestration, Central Firewall Reporting Advanced (30 days¹), MDR/XDR data lake connector
DNS Protection (not sold separately)	High-performance, cloud-based DNS protection for website compliance and security
Bundle-only features (not sold separately)	Active Threat Response with MDR/XDR threat feeds and third-party threat feeds, NDR Essentials
Enhanced Support	24/7 support access, firmware updates, advanced replacement hardware warranty for term²

Xstream Plus

Available for term licenses with upfront purchases. Not available for MSP Flex.

Xstream Plus combines the comprehensive protection capabilities in Xstream Protection with secure access for remote and hybrid workers, and extended Firewall reporting and support.

Module	What’s included
Xstream Protection	Includes the full scope of Xstream Protection, plus the additional capabilities listed below
Sophos Workspace Protection	Protected Browser, ZTNA, DNS Protection for endpoints, Email Monitoring System. User license quantity varies by XGS model or virtual/SW license
Firewall Reporting in Central Orchestration	Up to 1 year of data retention storage² for centralized reporting in Sophos Fusion
Enhanced to Enhanced Plus Support upgrade	Advanced RMA for a passive device in HA, priority case and sample handling, 2-8 hours of remote consulting, VIP access to Technical Resource team

How to buy Sophos Firewall

Choose the deployment option that works best for you

XGS Series appliances

Cloud

Virtual or software

Sophos Partners

Sophos Firewall Licensing

Xstream Protection bundle