Sophos XG is Optimized for the Cloud

XG Firewall offers the world’s best network visibility, protection, and response to secure your cloud and hybrid environments.

  • All-in-one protection. XG Firewall delivers all-in-one protection that integrates best-of-breed technologies into a single solution.

  • Unmatched visibility. XG Firewall provides extensive built-in reporting and a rich interactive dashboard highlight exactly what needs your attention the most.

  • Synchronized Security. XG Firewall integrates with Intercept X for Server and Sophos Central in real time. Together, they provide a coordinated defense against hacks and attacks.

  • Central cloud management. XG Firewall is managed from Sophos Central, Sophos’ cloud management platform. It makes day-to-day management of all your Sophos products easy and scalable.

  • Deploy in minutes. With preconfigured virtual machines in Azure (and soon Amazon Web Services) you’ll be up and running quickly.

All-in-One Public Cloud Protection

XG Firewall includes all the modular next-gen firewall protection you need and features you can't get anywhere else.

Next-Gen Firewall

Full next-gen firewall protection with high-performance IPS and ATP to stop the latest hacks and attacks dead in their tracks.

Synchronized Security

An XG Firewall exclusive. Your Sophos endpoints share health, app and other telemetry with XG Firewall to improve visibility, protection and response.

Web Application Firewall

Harden your cloud servers against hacking attempts while providing secure access to users with reverse proxy authentication.

Web and App Control

Get enterprise-grade web filtering policy controls and unmatched protection with next-gen user and group based application controls.


Cloud-based sandboxing powered by SophosLabs threat intelligence and deep learning. Block the latest zero-day file-based threats before they get on your network.


Flexible SD-WAN and VPN options enable inexpensive connectivity choices that fit your cloud and hybrid network perfectly.

Advanced Threat Protection and Compliance

XG Firewall makes compliance and security for your public cloud infrastructure easy.

Get the best next-gen protection against the latest advanced threats. Stop ransomware, cryptomining, bots, worms, hacks, breaches, and APTs with unique and innovative technologies. It’s all designed to catch threats we haven’t even seen yet:

  • SophosLabs Threat Intelligence powered by deep learning identifies new and zero-day threats before they get into your network

  • Industry-leading IPS performance and protection ensures exploitive malware and hackers are stopped dead in their tracks

  • Sandstorm Sandboxing provides the ultimate in affordable protection. Using the latest technology from Intercept X, it analyzes suspicious files in a safe cloud environment

  • An integrated Web Application Firewall protects your cloud servers and helps meet compliance requirements. Get protection from SQL injection and cross-site scripting attacks. Plus URL and form hardening, dual malware engines, GeoIP lists, SSL offloading, reverse authentication, and more

Unmatched Visibility and Insight


XG Firewall removes the blinders, providing extreme visibility and insight into all network activity whether it’s encrypted, evasive, or elusive.

  • Application visibility. Get unmatched clarity into evasive and custom networked applications on the desktop and in the cloud for added control

  • Network health and threats. Instantly identify suspicious and malicious threats on your network including the host, user, and process responsible

  • Built-in reporting. Take advantage of rich, extensive built-in reporting at no extra charge

Your Firewall and Cloud Server Protection –
Working Together

XG Firewall is part of the world’s best cybersecurity system. It integrates in real time with Sophos Central and Intercept X for Server.


100% Application Visibility

Intercept X is constantly sharing networked application information with XG Firewall to identify, control, and provide SD-WAN routing of your important apps. All while blocking any unwanted apps.

Monitor Health and Identify Threats

XG Firewall and Intercept X work together to continuously share health information over Security Heartbeat™. You know the state of your network at a glance and are instantly notified of any active threats.

Automatic Threat Isolation

When either XG Firewall or Intercept X identifies a threat, they work together to provide an automatic response. Dynamic firewall rules and lateral movement protection isolate a compromised host to prevent spread, hacker communication, and data loss.

One Cloud Console to Manage It All

Sophos Central

Sophos Central enables you to manage all your cloud protection from the cloud.

The Sophos Central dashboard consolidates all your Synchronized Security alerts, enabling you to focus on what’s important. It also makes central management of your firewalls and other Sophos products a breeze.

Sophos Central is accessible from anywhere, on any device, at any time. It doesn’t get any easier – and it’s free – you don’t need to deploy anything or pay extra to make your life easier with Sophos Central.