Skip to content

Sophos Firewall Subscriptions

Sophos Silver Partner

We don't just sell them, we know them!

Qualified Technical Team

A team you can trust with the experience you need

20+ Years Experience

1000's of installs across AU, NZ and UK

HomeFirewalls / Sophos / Sophos Firewall Subscriptions

Xstream Protection

Prices From


Standard Protection

Prices From


Enhanced Support

Prices From


  • Which Subscription?
  • More protection?
  • Thinking  Wireless?

Gio's Advice

Your firewall is nothing without a live and updating subscription.  Viruses, Malware and network threats, change almost hourly.  Purchasing a security subscription means that your firewall will always be receiving the latest threat signatures, virus protection updates and filter block lists.

The best bit is that an active security subscription also gives you free firmware updates, technical support from Sophos and hardware warranty for the duration of the subscription.

Never view a security subscription like the warranty for a car.   It is not there just in case something goes wrong, it is actually needed to make sure nothing goes wrong.  You are only truly being protected if your firewall is auto updating and has an active subscription.

Base License

Every Sophos XG/XGS firewall comes with a base license as standard.  This gives you the basic features to get going, but no ongoing updates or support.

standard protection

The Standard Protection Bundle provides all

essential security services needed to protect against known, as well as firmware updates, hardware warranty and 24x7 support

Xstream protection

The Xstream Protection Bundle builds on the features available in Standard, but adds in protection against unknown threat, often called Zero-Day, along with advanced SD-WAN capabilities and an extended reporting period.




24x7 Enhanced Support

24/7 support, advanced replacement hardware warranty for the term of the subscription.

Fimware Updates

Keep your Sophos patched and up to date with regular firmware updates.

Xstream SD-WAN and Networking

Includes all networking, routing, and SD-WAN capabilities including zone-based stateful firewall, NAT, VLAN, SDWAN profiles, performance-based WAN link selection and monitoring, zero-impact WAN link transitions, and Xstream FastPath acceleration of SD-WAN VPN traffic.

Secure Wireless

Built-in wireless controller for Sophos APX wireless access points. Plug-and-play access point discovery makes setup easy. Support for multiple SSIDs, hotspots, guest networks, and the diverse encryption and security standards.


Provides standards-based site-to-site and remote access VPN (free up to the capacity of the firewall) with support for IPsec and SSL. Sophos Connect remote access VPN client for Windows and Macs offers seamless and easy deployment and configuration options.


Extensive on-box reporting provides valuable insights into threats, users, applications, web activity, and much more. Note that specific reporting functionality may be dependent on other protection modules to get the full benefits (for example, Web Protection or web and app reports).  Please note the XGS 87 / 87 Wireless does not have enough onboard storage to provide on-box reporting.

Intrusion Prevention Service

Provides advanced protection from all types of modern attacks. It goes beyond traditional server and network resources to protect users and apps on the network as well.

Security Heart Beat

Creates a link between your Sophos Central protected endpoints and your firewall to identify threats faster, simplify investigation, and minimize impact from attacks. Easily incorporate Heartbeat status into firewall policies to automatically isolate compromised systems.

Advanced Threat Protection

Instant identification and immediate response to today’s most sophisticated attacks. Multi-layered protection identifies threats instantly and Security Heartbeat provides an emergency response.

Advanced VPN Technologies

Adds unique and simple VPN technologies, including our clientless HTML5 self-service portal that makes remote access incredibly simple or utilize our exclusive light-weight secure SD-RED (Remote Ethernet Device) VPN technology.

Application Control and QoS

Enables user-aware visibility and control over thousands of applications with granular policy and traffic-shaping (QoS) options based on application category, risk, and other characteristics. Synchronized Application Control automatically identifies all the unknown, evasive, and custom applications on your network.

Advanced Web Threat Protection

Backed by SophosLabs, our advanced engine provides the ultimate protection from today’s polymorphic and obfuscated web threats. Innovative techniques like JavaScript emulation, behavioral analysis, and origin reputation help keep your network safe.

High-performance traffic scanning

Optimized for top performance, our Xstream SSL inspection provides ultra-low latency inspection and HTTPS scanning while maintaining performance

Zero-Day Protection

Powered by the industry-leading SophosLabs, the Zero-Day Protection subscription includes a fully cloud-based threat intelligence and threat analysis platform. This provides deep learning-based file analysis, detailed analysis reporting, and a threat meter to show the risk summary for a file. We use layers of analytics to identify known and potential threats, reduce unknowns, and derive verdicts and intelligence reports for the most commonly used file types.

Sophos Central SD-WAN Orchestration

Makes VPN orchestration easy. Wizard-based tunnel configuration helps create full mesh networks, hub-and spoke models, or complex tunnel setups between multiple firewalls a quick point-and-click exercise. Seamlessly integrates multiple WAN link and SD-WAN functionality and routing optimizations to improve resilience and performance and also integrates with user authentication and Synchronized Security Heartbeat to control access.

Central Firewall Reporting Advanced (30-day)

Cloud-based reporting with several pre-packaged common reports for threats, compliance, and user activity. Includes advanced options for creating custom reports and views with the option to save, schedule or export your custom reports. Includes 30 days of log data retention with the option to add additional storage for additional historical reporting needs.


Sophos MTR provides optional 24/7 threat hunting, detection and response delivered by an expert team as a fully-managed service. Sophos XDR offers extended detection and response managed by your own team. Regardless of whether you manage it yourself, or Sophos manages it for you, your Sophos Firewall is ready to share the necessary threat intelligence and data to the cloud.

Email Protection

Consolidate your email protection with anti-spam, DLP, and encryption. We recommend Sophos Central Email Advanced for the best cloud-based email protection solution. If you require on-box email protection, this module offers essential anti-spam, DLP and encryption.

Optional Add-On

Optional Add-On

Web Server Protection

Harden your web servers and business applications against hacking attempts while providing secure access.

Optional Add-On

Optional Add-On

information hub

What happens if I don't renew my Sophos Subscription?

For the best protection a firewall will always need an active and configured security subscription.   If this has lapsed or your are thinking about not renewing it, then the following will happen.

1 - You will loose the option to get free support from the Manufacturer

2 - You will loose all hardware warranty and if your physical unit fails, you will no longer be able to get a free replacement

3 - Any firewall polices that use subscription services will need to be updated to remove them, otherwise they will often switch in to blocking mode.

4 - Your firewall will return to the base license subscription

Is support included in the subscription?

Support is included as standard in the 2 main subscription offerings - Standard Protection and Xstream Protection.   This support includes telephone and email support direct with Sophos, Firmware Updates and Hardware Warranty.

Is hardware warranty included?

If you have a current Standard Protection or Xstream Protection, then hardware replacement is included for the length of time you keep that subscription current.  Please do note that in the case of hardware failure, Sophosl will ship you a replacement from outside of Australia.   You may like to consider additional next business day hardware warranty services to supplement this, to get you back and running as quickly as possible.

What options do I have to get additional support if I get stuck?

We know that sometimes we just need that extra little bit of help and support.   The Tech Geeks have a team that are qualified to assist you and get your back on track as quickly as possible.   We offer rates from $150 + GST per hour and would be happy to quote for any work that you need help with.

Real world performance tests

The below tests have been conducted on a dedicated 1:1 uncontended 1Gb/s fibre connection