There are no products listed under this category.
Bring a branch office onto your network, no engineer required.
A Sophos SD-RED is a small device you ship to a remote site. Someone plugs it in, and it builds an encrypted tunnel back to your main Sophos Firewall on its own. The branch then behaves like part of your head-office network, with all security and policy enforced centrally.
Connecting remote sites? Get a quote or call 1-833-283-7373 and we will size it.
How it works.
There is no configuration at the remote end, and no security appliance to manage there.
Enter the ID, ship it
You type the SD-RED's device ID into your Sophos Firewall at head office, then ship the unit to the branch. Nobody on site needs technical skills.
It calls home and connects
Plugged in and online, the device contacts your firewall, downloads its configuration, and establishes an AES-256 encrypted tunnel automatically. It takes minutes.
Security stays central
All filtering, protection, and policy happen at your main firewall, so the branch is protected without a separate appliance, and it gets Synchronized Security like the head office.
Two models. Which branch is which?
Pick by how much bandwidth the site needs and whether it needs a backup connection or to power gear.
| SD-RED 20small office / home | SD-RED 60busier branch | |
|---|---|---|
| Max throughput | 250 Mbps | 850 Mbps |
| LAN ports | 4 × 1 GbE | 4 × 1 GbE |
| WAN ports | 1 | 2 (failover) |
| Power over Ethernet (PoE) | — | 2 ports, 30W total |
| Modular bay (Wi-Fi or cellular) | Yes | Yes |
| Best for | A small remote office or home worker that just needs a secure link home | A busier branch needing more speed, a backup WAN, or PoE to power access points |
| Buy | Shop SD-RED 20 | Shop SD-RED 60 |
Both models have a modular bay, so you can add a Wi-Fi module for wireless at the remote site or a cellular module for a mobile or backup connection. The RED 15, 15w, and 50 are end-of-life; SD-RED 20 and 60 are the current models.
Before you order.
SD-RED is an extension of your firewall, not a standalone box, so a couple of things need to be in place.
You need a central Sophos Firewall
An SD-RED only works paired with a Sophos Firewall at your main site; it cannot run on its own.
Network Protection is required
Managing SD-REDs needs an active Network Protection subscription (or a bundle that includes it) on your firewall.
Five-year warranty
SD-RED devices carry a standard five-year warranty, with support included if you hold Enhanced Plus support on your firewall.
touch setup at the branch
Tell us how many sites you are connecting and roughly how much bandwidth each needs. We will size the SD-REDs, confirm your firewall covers them, quote it, and reply in two to three business days.
SD-RED questions.
What is a Sophos SD-RED?
SD-RED stands for Software-Defined Remote Ethernet Device. It creates an AES-256 encrypted tunnel between a remote site and the Sophos Firewall at your main office, so the remote location behaves as if it is on your local network. All protection and policy happen at the central firewall.
Do I need IT skills at the remote site?
No. You register the device ID on your firewall and ship the unit. Someone at the site plugs it into power and the internet, and it connects and configures itself automatically.
What is the difference between SD-RED 20 and 60?
The SD-RED 20 handles up to 250 Mbps with a single WAN port, for small offices and home workers. The SD-RED 60 handles up to 850 Mbps, adds a second WAN port for failover, and includes two PoE ports to power access points or other devices at the site.
Can I add Wi-Fi or cellular at the branch?
Yes. Both models have a modular bay that takes a Wi-Fi module for local wireless or a cellular module for a mobile or backup connection.
Does an SD-RED work without a Sophos Firewall?
No. An SD-RED is an extension of a central Sophos Firewall and cannot operate as a standalone device. You also need an active Network Protection subscription to manage it.
Connect your remote sites the easy way.
Tell us how many sites and how much bandwidth each needs. We will size the SD-REDs, confirm your firewall covers them, quote it, and reply in two to three business days. Browse SD-RED devices below.

