Sophos APX End of Life: AP6 Upgrades
Posted by Saif Khan on 2025 May 3rd
Sophos APX access point end of life: dates, replacements, and what to do
Sophos has ended sale of the APX Series wireless access points and set end of life for 31 December 2027. After that date there are no firmware or security updates, no technical support, and no RMA cover. If you run APX 120, 320, 320X, 530 or 740 access points, this is the plan for replacing them with the AP6 Series.
The short version: you have time, but not as much as the 2027 date suggests. Wireless refreshes touch every room in the building and usually need a survey, so most businesses should be scoping this in 2026 rather than 2027.
The dates that matter
| Milestone | Date | What it means |
|---|---|---|
| End of Sale | 31 March 2024 | Already passed. You cannot buy new APX units |
| End of Life | 31 December 2027 | Firmware, security updates, support and RMA all stop |
Between now and the end of 2027 the units keep working and keep receiving updates. After it they keep working and stop receiving them, which is the part that matters. An access point is on your network edge and handles every wireless client you have.
Which AP6 replaces which APX
These are the direct replacements, matched on role rather than on model number.
| Your APX model | AP6 replacement | What changes |
|---|---|---|
| APX 120 | AP6 420 | Wi-Fi 6, entry indoor unit |
| APX 320 | AP6 420 or AP6 420E | The E variant adds Wi-Fi 6E and the 6 GHz band |
| APX 320X (outdoor) | AP6 420X | Outdoor rated, Wi-Fi 6 |
| APX 530 | AP6 840 | Higher capacity indoor, plenum rated |
| APX 740 | AP6 840E | Top of range, Wi-Fi 6E, 2.5GbE uplink |
If you are not sure which you have, the model is printed on the label on the back of the unit, and it is listed in the wireless section of your Sophos console.
What you actually gain
| Area | APX Series | AP6 Series |
|---|---|---|
| Wi-Fi generation | Wi-Fi 5 and Wi-Fi 6 depending on model | Wi-Fi 6 and Wi-Fi 6E |
| 6 GHz band | No | Yes, on the E models |
| Encryption | WPA2, WPA3 on later models | WPA3 |
| Management | Sophos console | Sophos Fusion, alongside your firewall and endpoint |
| Support and updates | Ends 31 December 2027 | Current |
The practical gains are more simultaneous devices per access point and the 6 GHz band on the E models, which matters in a dense office where the 5 GHz band is congested. If your current wireless is fine and your device count is stable, the honest driver here is the support cliff rather than performance.
Planning the replacement
- Count your units and note the models. The replacement mapping above is per model, and a mixed estate is common.
- Check your PoE budget. AP6 units draw more than the APX generation. If your switch is already near its PoE limit, the switch may need attention at the same time.
- Check your uplinks. The AP6 840E has a 2.5GbE uplink. On a Gigabit switch port it still works, but you will not get the full benefit.
- Plan a survey if the layout changed. If walls moved or the building was extended since the APX units went in, a like-for-like swap may not give the same coverage.
Buy Sophos AP6 access points from Nuformat
Nuformat is a Sophos partner serving Canada and the United States. Send us your APX model list and unit count and we will quote the AP6 equivalents, flag any PoE or uplink issues, and tell you whether you need a survey. Browse Sophos AP6 access points or contact Nuformat.
Frequently asked questions
When do Sophos APX access points reach end of life?
31 December 2027. End of sale was 31 March 2024, so APX units can no longer be purchased new. After the end-of-life date there are no firmware or security updates, no technical support and no RMA processing.
Which APX models are affected?
APX 120, APX 320, APX 320X outdoor, APX 530 and APX 740. All APX Series models are covered by the same end-of-life date.
What replaces the Sophos APX 320?
The AP6 420, or the AP6 420E if you want Wi-Fi 6E and the 6 GHz band. The 420E costs more and is worth it in a dense environment where the 5 GHz band is congested.
Do I have to replace APX access points before 2027?
They keep working after the date, but they stop receiving firmware and security updates, and an access point sits on your network edge handling every wireless client. Most businesses should scope the replacement during 2026, because wireless refreshes usually need a survey and touch every room.
Will AP6 access points work with my existing Sophos firewall?
Yes. AP6 units are managed from Sophos Fusion alongside your firewall and endpoint, so the wireless estate appears in the same console as the rest of your Sophos environment.
Will my existing switches power the AP6 units?
Check your PoE budget first. AP6 access points draw more power than the APX generation, so a switch already near its PoE limit may need attention at the same time. Send us your switch model and we will confirm.