Unrivaled Protection and Simplicity.
Unmatched Value.

XG Firewall offers the world’s best Unified Threat Management (UTM) protection. It’s easy to manage, with unmatched value.

  • More protection. XG Firewall offers more in one appliance than any other UTM, including reporting, email, and a web application firewall.

  • Easy management. XG Firewall and Sophos Central have been designed from the start to make day-to-day management easy.

  • Incredible value. XG Firewall includes on-box reporting and many other capabilities that most security vendors will charge you extra to use.

All-in-One Network Protection

XG Firewall includes all the latest next-gen firewall protection you need, plus features you can't get anywhere else.

Next-Gen Firewall

Full next-gen firewall protection with high-performance IPS and ATP to stop the latest hacks and attacks dead in their tracks.

Synchronized Security

An XG Firewall exclusive. Your Sophos endpoint protection shares health, app, and other telemetry with XG Firewall to improve visibility, protection, and response.


Set up, manage, and secure wireless networks in just minutes with XG Firewall’s built-in wireless controller.

Web and App Control

Enterprise-grade web filtering policy controls and unmatched protection with next-gen user- and group-based application controls.


Powered by SophosLabs threat intelligence and deep learning, XG Firewalls block the latest zero-day file-based threats before reaching the network.


Flexible SD-WAN options and our unique SD-RED devices easily secure remote/branch offices, enhance WAN redundancy, and optimize cloud app performance.


Full SMTP and POP message protection from spam, phishing, and data loss, combining policy-based email encryption with DLP and anti-spam.

Web Server

Harden your web servers against hacking attempts while providing secure access to external users with reverse proxy authentication.


A full suite of standard remote access and site-to-site VPN technologies. Plus our unique RED tunnel VPN option and free remote access client.

One Cloud Console to Manage It All

Sophos Central

Sophos Central enables you to manage all of your IT security protection through a single cloud-based platform.

The Sophos Central dashboard consolidates all your alerts, enabling you to focus on what’s important. It also makes central management of all your firewalls and other Sophos products a breeze.

Sophos Central is accessible from anywhere, on any device, any time. It doesn’t get any easier – and it’s free. You don’t need to deploy anything or pay extra to make your life simpler with Sophos Central.

A Firewall That Thinks Like You.

So you don’t need to think like a firewall.

We’ve rethought the way firewall rules and security policies are managed. Sophos XG implements a refreshing new unified approach to network security. It enables you to see and manage all of your protection in one place – the Rule and Policies Screen.

  • Dozens of built-in protection policies for IPS, web, traffic shaping and more help you get up and running quickly. Plus, easily customize or create your own policies.

  • Protection policies snap in to firewall rules. You’re enabled to immediately see all the protection being applied to any given source/destination, user/group, or traffic type.

  • Granular options for SSL inspection, NAT and SD-WAN routing enable XG Firewall to fit any network. No more forcing your network to fit the firewall.

Put Your IT Security on Autopilot

XG Firewall is part of the world’s best cybersecurity system, integrating in real-time with Intercept X.


Monitor Health and Identify Threats

XG Firewall and Intercept X work together to continuously share health information over Security Heartbeat™. You know the state of your network at a glance and are instantly notified of any active threats.

Automatic Threat Isolation

When either XG Firewall or Intercept X identifies a threat, they work together to provide an automatic response. Dynamic firewall rules and lateral movement protection isolate a compromised host to prevent spread, hacker communication, and data loss.

100% Application Visibility

Intercept X is constantly sharing networked application information with XG Firewall. It identifies, controls, and provides SD-WAN routing of your important business apps all while blocking any unwanted apps.

Enterprise Protection – for Everyone.

We believe businesses of all size need the same protection against the latest threats. This is why XG Firewall offers the best enterprise-grade protection in every model – at every price point.

You get the best protection from ransomware, cryptomining, bots, worms, hacks, breaches and APTs. Our unique and innovative technology is designed to catch threats we haven’t even seen yet:

  • SophosLabs Threat Intelligence powered by deep learning identifies new and zero-day threats before they get on your network.

  • Industry-leading IPS performance and protection ensure exploitive malware and hackers are stopped dead in their tracks.

  • Sandstorm sandboxing provides the ultimate in affordable protection by analyzing suspicious files in a safe cloud environment. It uses the latest technology from Intercept X, and it’s the most affordable Sandbox solution available anywhere.

Unmatched Visibility and Built-in Reporting. For Free.

Reports dashboard

XG Firewall offers a unique, visually interactive action-oriented dashboard and a full suite of on-box historical reporting at no additional charge. Get hundreds of pre-packaged reports offering incredible insights. Plus, find extensive options to automatically schedule distribution and export to PDF, HTML, or CSV.

  • Top risk users based on web activity and recent threat incidents.

  • Threat Intelligence provides in-depth analysis into all the files entering your network.

  • Top risk applications and previously unidentified applications discovered by Synchronized App Control.

  • In-depth web usage and activity by user and group.

Flexible Deployment Options - Designed for You

sophos appliances stack

XG Firewall offers a completely modular network protection solution. Get just the protection you need to consolidate your network security infrastructure, simplify day-to-day management, and save in many ways:

  • Flexible deployment. XG Firewall offers a full range of top-performing hardware appliances. Get support for all the popular virtualization platforms, both the AWS (Amazon Web Services) and the Azure public clouds. Plus,even a software appliance you can install on your own hardware.

  • Modular protection. XG Firewall offers a full suite of protection options for your network, wireless, web and app traffic, email, and servers. You’re enabled to pick and choose just what you need.

  • Be up and running in no time. Just a few clicks through our intuitive setup wizard, and using many of our pre-packaged protection policies and you’re secure. Or, use the new zero-touch deployment option from Sophos Central. There are a ton of resources designed to help you get up and running quickly.