Description
Sophos XGS 4300 Xstream Protection, monthly license
This is the Xstream Protection license for a Sophos XGS 4300 firewall, billed month to month instead of as a multi-year term. It is managed by Nuformat as your MSP through Sophos MSP Flex. You keep the full Xstream threat stack on a 4300 without committing capital to a three or five-year subscription upfront. The appliance itself is purchased separately.
Key specifications of the XGS 4300
| Firewall throughput | 75 Gbps |
| IPS throughput | 29.5 Gbps |
| Threat protection throughput | 25.2 Gbps |
| TLS (SSL) inspection | 8 Gbps |
| IPsec VPN throughput | 62.5 Gbps |
| Concurrent connections | 16,600,000 |
| Fixed interfaces | 4 x GE copper, 4 x 2.5 GE copper, 4 x SFP+ 10 GE fibre |
Why choose monthly licensing
- No large upfront license cost. A 4300 Xstream term subscription is a significant capital outlay. Monthly billing spreads it, which matters when the budget is operational rather than capital.
- No multi-year commitment. Month to month, so you are not locked into three or five years on a single site.
- Managed by Nuformat as your MSP. One point of contact for licensing, billing, and support, and we handle the MSP Flex administration.
- The full Xstream stack, not a cut-down tier. TLS 1.3 inspection at 8 Gbps, deep packet inspection, cloud sandboxing, and the advanced IPS.
What Xstream Protection includes
| Threat protection | Intrusion prevention, deep packet inspection, advanced IPS |
| Encrypted traffic | TLS 1.3 inspection on the appliance, up to 8 Gbps |
| Zero-day defense | Deep-learning malware analysis and real-time cloud sandboxing |
| Web and app control | Web filtering, DNS protection, application control |
| Management | Sophos cloud console, included at no extra cost |
| Billing | Monthly through Sophos MSP Flex, managed by Nuformat |
Monthly or a term license?
The trade-off is price certainty against upfront cost, and it is worth being clear about:
- Monthly (this listing). Lower barrier to entry, no multi-year lock-in. The rate is set by Sophos and is subject to change over time.
- Term license (1, 3, or 5 years). Paid upfront, and it fixes your price for the whole term with no increases. Usually the lower total cost over a long hold.
If you plan to run the 4300 for five years and have the capital, a term license normally works out cheaper. If you would rather keep the cash and stay flexible, monthly is the reason this listing exists.
Who it is for
Head office or growing business
A 1U rackmount firewall for a main office or a company that has outgrown a desktop model.
Room to expand
FleXi Port bays let you add copper, fiber or bypass ports later without replacing the firewall.
Prefer monthly billing
Nuformat bills the protection monthly as your managed service provider, instead of a multi-year commitment.
Upgrade path
- XGS 4300 with Xstream Protection (this listing). The full Sophos Firewall protection bundle.
- Enhanced Plus support. Senior engineers, remote consulting hours and priority malware analysis, as an upgrade to Enhanced Support.
- FleXi Port modules and transceivers. Add copper, fiber or bypass ports as the network grows.
- Sophos XGS 4500. The next model up, if you need more TLS inspection throughput.
- Sophos MDR. A 24/7 team that uses your firewall data alongside endpoints and email.
All options for the Sophos XGS 4300
| Option | One-time or monthly | 1 year | 3 years | 5 years |
|---|---|---|---|---|
| Appliance only (Base License) | View | - | - | - |
| Appliance + Standard Protection | - | View | View | View |
| Appliance + Xstream Protection | - | View | View | View |
| Xstream Protection renewal | - | View | View | - |
| Standard Protection, monthly | View | - | - | - |
| Xstream Protection, monthly | This listing | - | - | - |
| Webserver Protection add-on | - | View | - | - |
| Other terms or several units | Ask Nuformat for a quote, including high availability pairs | |||
Frequently asked questions
Does this include the XGS 4300 appliance? No. This is the Xstream Protection license only, billed monthly. The appliance is purchased separately. If you want the hardware and the license on a single monthly bill with no upfront cost, ask us about Hardware as a Service instead.
Can the monthly price change? Yes. Monthly rates are set by Sophos and are subject to change. Only a term license locks your price for the period you buy.
What is the difference between Standard and Xstream Protection? Standard covers the base firewall plus SD-WAN and ZTNA. Xstream adds the full threat stack, including TLS 1.3 inspection and cloud sandboxing. For a 4300, which is usually protecting a large site or a data-center edge, Xstream is the normal choice.
Is there a minimum commitment? No, this license is month to month. Hardware as a Service is the option that carries a 12-month minimum, because the appliance is included in it.
Do you need my serial number? Yes. Your XGS 4300 serial number lets us attach the license to your exact appliance.
What happens if I stop paying? Security services stop updating and support ends. The firewall keeps passing traffic, but without current threat intelligence its protection degrades against new threats.
Get it from Nuformat
Add it to your cart, or contact Nuformat for a quote covering the appliance, the license, and the option of Hardware as a Service. We serve Canada and the USA.
Compare every model, license, and payment option on our Sophos XGS firewall page.

