Sophos - XS to XGS upgrade
If you want the best protection from your Sophos Firewall, now is the time to trade in your XG and get a new XGS. Moving to an XGS hardware appliance will allow you to access the latest Sophos Firewall version and receive all its benefits. We have plenty of options in the XGS firewall hardware appliance range to suit your unique requirements and will work with you to ensure you can take full advantage of the best deals.
Why should I upgrade?
From 31st March 2025, the Sophos XG Series firewall appliances will reach end-of-life and will no longer support new Sophos Firewall versions, or continued warranty and support. This includes the latest version of Sophos Firewall, version 21.
Upgrading your Sophos Firewall to support the latest version will boost performance, deliver access to the new firmware and enhance your overall experience. As well as new features, which we will lay out below, v21 also offers a suite of critical security enhancements, ensuring you are protected against the increasing threat of cyberattacks.
Check below to see if your current XG product is impacted:
XG 86, XG 86w, XG 106, XG 106w, XG 115, XG 115w, XG 125, XG 125w, XG 135, XG 135w, XG 210, XG 230, XG 310, XG 330, XG 430, XG 450, XG 550, XG 650, XG 750
Note: XG 85 and XG 105 had an earlier EOL date and are no longer supported.
What do I get?
Enhanced Performance
Sophos Firewall v21 leverages the latest Xstream architecture and offers expanded connectivity options, delivering significant performance benefits that span enhanced TLS inspection, IPsec VPN improvements, High-availability (HA) deployments and authentication and web enhancements. This boosts resilience and streamlines transitions to reduce down-time.
Active Threat Response
This has been extended to support third-party threat feeds and better integrate with SoC and other threat intelligence providers.
User experience
Most people do not want to have to learn an entirely new system. Upgrading to the new firewall provides enhanced functionality without altering your overall user experience.
How easy is it to upgrade my configuration?
Upgrading can be done in a few clicks using either Zero Touch remote migration (via Sophos Central) or via the web admin consoles of the two firewalls.
1. Zero Touch remote migration:
Log into Sophos Central to find the update available for your firewall, then select a convenient time to schedule the update.
XG to XGS migration - Migration center
2. Use the two firewalls' web admin consoles:
You can easily update via your on-box management consoles. Simply backup the XG appliance and restore on your new XGS appliance.
XG to XGS migration - Migration center
New configuration tools:
There are now a range of tools that enable a frictionless configuration transfer, which reduces deployment time and ensures your upgrade is simple to complete. These include:
- enhanced backup-restore functionality for seamless transfer from your current XG Series firewall to your new XGS appliance in only a few clicks.
- no restrictions around transfers between appliances that have different port numbers
- restore a wireless device to an XGS Series device without built-in wireless
- port mapping assistant to map your current hardware ports to your new appliance
- single configuration template from a virtual appliance, which can be applied across all your new firewall appliances, regardless of form factor (hardware/virtual/software)
Sophos TechVids has also created a set of how-to videos that guide you through the XG to XGS upgrade process.
Upgrading your Sophos Firewall from XG to XGS
How much will this upgrade cost?
Currently there are several promotions and limited-time offers available for existing XG customers to make the renewal cost effective.
Up to 99% discount on XGS hardware and up to 33% on Xstream Protection (3-year term)*
A 1-year hardware refresh offer is also available if you don't have the budget available for a 3-year term
Look for the XG to XGS Upgrade pricing on our product page for the Desktop and Rackmount series XGS firewalls
Remind me again why I need to upgrade my XG to XGS?
Staying with your current XG firewall hardware appliance means that the software will not receive any future updates, and you will not be protected against emerging cyberthreats. If you have a valid licence, you will still have features that aren’t impacted by data services and updates. For instance, high availability, reporting, routing and VPN.
However, your installed data and engines will age and degrade. Any component issues or security vulnerabilities will NOT be fixed or receive patches from Sophos after the 31st March 2025. These include the following:
Anti-virus signature and engine updates, for both the Sophos and Avira engines
IPS signature and engine updates
Anti-spam (SASI) signature and engine updates
URL classification lookups
Sophos X-Ops Threat Feeds
This will place products, data and your entire network at risk, resulting in increased security risks and traffic disruption. It may also affect business compliance.
Upgrading to the latest XGS Series firewall appliances will ensure you have to-the-minute protection and full network security through the next generation performance of the latest Sophos Firewall.
Why buy from The Tech Geeks
We don’t just sell Sophos, we know it, support it and have used and installed them for over 10 years.
If you would like more support, our team can help you find the optimal Sophos XGS solution. With 2 qualified Sophos Architects and 3 qualified Sophos Sales staff, the Tech Geeks are the ideal partner for your Sophos XGS upgrade. We offer a complete, end-to-end service, from product selection through to install.
The Tech Geeks is a Sophos Australian Gold Partner with technical qualifications of Platinum and our team has experience installing hundreds of Sophos Firewall across Australia and New Zealand.
