Buy Sophos Firewall | Get Pricing for Sophos XGS

How to buy Sophos Firewall

Choose the deployment option that works best for you

XGS Series appliances

Select from our extensive range of high-performance XGS Series firewall appliances powered by Sophos Xstream.

Cloud

Protect your cloud and hybrid networks with Sophos Firewall using our pay-as-you-go (PAYG) or bring-your-own-license (BYOL) option.

Buy now on AWS

Buy now on Azure

Virtual or software

Deploy using your preferred virtual environments, including VMware, Microsoft Hyper-V, Citrix, and KVM. Or deploy a software image on your own Intel hardware.

Request a quote

Sophos Partners

All Sophos products are sold via a network of resellers and Managed Service Providers. A qualified partner can help you with sizing to ensure you select the firewall that best suits your throughput requirements and your environment.

If you already work with a trusted Sophos Partner or MSP or are a new customer and want further pricing information, submit a quote request.

Sophos Firewall Licensing

We recommend purchasing your Sophos Firewall with the Xstream Protection bundle, as it offers the broadest protection and is constantly being enhanced with new features (at no extra cost), increasing the value of your investment over the full lifecycle of your product. Every Sophos Firewall requires a Base License.

Module	What’s included
Base License	Networking, wireless, Xstream architecture, unlimited remote-access VPN, site-to-site VPN, reporting

The Base License:

Is included in the purchase price of a hardware appliance
Needs to be purchased separately for virtual, software-only, or cloud deployments

While the Base License includes some core functionality, you will always need to add support, at the very least, to unlock access to firmware updates, Sophos Fusion management and reporting, and access to our customer support organization.

Xstream Firewall Protection Bundle

The Sophos Firewall Xstream Protection Bundle provides all the next-gen protection, performance, and value you need to power the most demanding networks.

Module	What’s included
Network Protection	Xstream TLS and DPI Engine, intrusion prevention system (IPS), Sophos Active Threat Response with Sophos X-Ops threat feeds, Security Heartbeat™, SD-RED management, reporting
Web Protection	Xstream TLS and DPI Engine, web security and control, application control, reporting
Zero-Day Protection	Machine learning, sandboxing, file analysis, reporting
Central Orchestration	SD-WAN/VPN orchestration, Central Firewall Reporting Advanced (30 days¹), MDR/XDR data lake connector
DNS Protection (not sold separately)	High-performance, cloud-based DNS protection for website compliance and security
Bundle-only features (not sold separately)	Active Threat Response with MDR/XDR threat feeds and third-party threat feeds, NDR Essentials
Enhanced Support	24/7 support access, firmware updates, advanced replacement hardware warranty for term²

All the protection modules shown above are also available for individual purchase, except DNS Protection, which can only be purchased as part of the Xstream Protection bundle. You can also add Email Protection, Web Server Protection, and an Enhanced Plus Support upgrade, all sold separately. To learn more about these modules, download the Sophos Firewall brochure.

Important note: Support must be added to any individual module purchased (including the Base License) to be eligible for firmware updates and full customer support access.

¹ 30-day calculation is based on the average traffic volumes for each firewall appliance size. In higher-than-average traffic environments, the report retention rate may be lower.

² For active/passive high-availability (HA) configurations, the primary appliance must have an Enhanced Plus Support contract to entitle the passive appliance to advanced RMA.

Options and accessories

Sophos Firewall is part of the world’s best cybersecurity ecosystem, enabling you to easily extend your network, protection, and team capabilities.

Extend your network

To remote and hybrid workers with Sophos Workspace Protection.
To branch offices and remote locations with SD-RED plug-and-play edge devices.
To your network infrastructure with Sophos Switches and wireless that support Active Threat Response and Sophos Fusion management.

Extend your protection

With Sophos Workspace Protection that includes our Protected Browser, ZTNA, DNS Protection, and Email Monitoring System.
With Sophos Endpoint to protect your devices from ransomware and other advanced cyberattacks.
With Sophos Email to defend against phishing and BEC attacks.

Extend your team

With Sophos Fusion management to streamline your day-to-day workflow.
With Firewall Reporting Advanced for deeper analytics and insights.
With Managed Detection and Response for 24/7 monitoring of your network by experts.

* Excluding the Base License

If you already work with a trusted Sophos Partner or MSP or are a new customer and want to take advantage of preferred pricing, submit a quote request.

Contact Request: Content with Form - Background Image

Request a quote to pave the way to your new Sophos Firewall and these benefits:

Simple pricing – Select a Sophos protection bundle, which includes the virtual/hardware appliance of your choice plus all the security services you need
Cloud-based – Firewall management and selected reporting options come at no extra cost for licensed customers
More than a firewall – Our add-ons provide easy options for plug-and-play, site-to-site connectivity, Wi-Fi access, and much more

Submit the form to get your quote.

Sophos Firewall reviews

in Gartner Peer Insights, 2024, Network Firewalls

4.7

842 Ratings