Description
Sophos XGS 4300 Xstream Protection - 12 Months - Renewal
This renews the Xstream Protection subscription on a Sophos XGS 4300 firewall you already own. It does not include hardware. Your existing appliance, configuration and policies stay exactly as they are.
Size on the TLS inspection figure, not firewall throughput. Almost all web traffic is encrypted, so 8,000 Mbps is the number that limits what this appliance can actually inspect. The firewall throughput figure assumes unencrypted traffic you will rarely see.
Standard or Xstream Protection?
| Included | Standard | Xstream |
|---|---|---|
| Firewall, SD-WAN, ZTNA | Yes | Yes |
| TLS 1.3 inspection | No | Yes |
| Cloud sandboxing | No | Yes |
| Advanced IPS | No | Yes |
If your users browse the web, Xstream is the bundle that inspects encrypted traffic. Standard makes sense only where you have a specific reason not to inspect TLS.
Three ways to buy
- Term subscription. Buy the appliance and licence together for 1, 3 or 5 years. Only this route fixes your price for the period.
- Own the hardware, licence monthly. Buy the appliance, pay the licence month to month through Nuformat as your MSP.
- Hardware as a Service. Appliance and subscription on one monthly bill with nothing upfront. The MSP owns the hardware and the payments are perpetual.
Ask us and we will price all three together so you can compare properly.
Frequently asked questions
What are the Sophos XGS 4300 specifications?
The XGS 4300 delivers 75,000 Mbps firewall throughput, 29,500 Mbps IPS, 26,200 Mbps threat protection and 8,000 Mbps of Xstream TLS inspection, supporting 16,600,000 concurrent connections.
How many users does the XGS 4300 support?
Sophos does not publish user counts per model, so we do not quote them. Sizing depends on your internet speed, how many services you enable and how much traffic you inspect. Send us those three and we will size it against the Sophos sizing tool.
Does renewing keep my configuration?
Yes. A renewal extends the subscription on your existing appliance. Nothing about your configuration, rules or policies changes.
What happens if the subscription lapses?
The firewall keeps passing traffic, but the subscription services stop updating. Threat intelligence, IPS signatures and sandboxing go stale, which is the point at which the appliance stops protecting you properly.
XGS 4300 buying guide · XGS 4300 vs the alternatives · Compare all XGS models
Get this quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. We stock the full XGS range. Tell us your user count, internet speed and which services you plan to run, and we will confirm the sizing and reply in two to three business days.
Request a quoteSpecifications as published by Sophos. Pricing and availability confirmed by Nuformat at the time of quotation.

