Description
Sophos XGS 5500 Xstream Protection - 12 Months - Renewal
This renews the Xstream Protection subscription on a Sophos XGS 5500 firewall you already own. It does not include hardware. Your existing appliance, configuration and policies stay exactly as they are.
Size on the TLS inspection figure, not firewall throughput. Almost all web traffic is encrypted, so 13,500 Mbps is the number that limits what this appliance can actually inspect. The firewall throughput figure assumes unencrypted traffic you will rarely see.
Standard or Xstream Protection?
| Included | Standard | Xstream |
|---|---|---|
| Firewall, SD-WAN, ZTNA | Yes | Yes |
| TLS 1.3 inspection | No | Yes |
| Cloud sandboxing | No | Yes |
| Advanced IPS | No | Yes |
If your users browse the web, Xstream is the bundle that inspects encrypted traffic. Standard makes sense only where you have a specific reason not to inspect TLS.
Three ways to buy
- Term subscription. Buy the appliance and license together for 1, 3 or 5 years. Only this route fixes your price for the period.
- Own the hardware, license monthly. Buy the appliance, pay the license month to month through Nuformat as your MSP.
- Hardware as a Service. Appliance and subscription on one monthly bill with nothing upfront. The MSP owns the hardware and the payments are perpetual.
Ask us and we will price all three together so you can compare properly.
Who it is for
Campus or data center edge
High-capacity models for large sites, data centers and heavy TLS inspection loads.
Quoted to your design
These models are quoted to order, so we size ports, modules and high availability with you first.
Keep protection running
Renew before the end date so protection updates and Enhanced Support continue without a gap.
Upgrade path
- XGS 5500 with Xstream Protection (this listing). The full Sophos Firewall protection bundle.
- Enhanced Plus support. Senior engineers, remote consulting hours and priority malware analysis, as an upgrade to Enhanced Support.
- FleXi Port modules and transceivers. Add copper, fiber or bypass ports as the network grows.
- Sophos XGS 6500. The next model up, if you need more TLS inspection throughput.
- Sophos MDR. A 24/7 team that uses your firewall data alongside endpoints and email.
All options for the Sophos XGS 5500
| Option | One-time or monthly | 1 year | 3 years | 5 years |
|---|---|---|---|---|
| Appliance only (Base License) | View | - | - | - |
| Appliance + Standard Protection | - | View | View | View |
| Appliance + Xstream Protection | - | View | View | View |
| Xstream Protection renewal | - | This listing | View | - |
| Standard Protection, monthly | View | - | - | - |
| Xstream Protection, monthly | View | - | - | - |
| Other terms or several units | Ask Nuformat for a quote, including high availability pairs | |||
Frequently asked questions
What are the Sophos XGS 5500 specifications?
The XGS 5500 delivers 100,000 Mbps firewall throughput, 40,000 Mbps IPS, 46,000 Mbps threat protection and 13,500 Mbps of Xstream TLS inspection, supporting 32,400,000 concurrent connections.
How many users does the XGS 5500 support?
Sophos does not publish user counts per model, so we do not quote them. Sizing depends on your internet speed, how many services you enable and how much traffic you inspect. Send us those three and we will size it against the Sophos sizing tool.
Does renewing keep my configuration?
Yes. A renewal extends the subscription on your existing appliance. Nothing about your configuration, rules or policies changes.
What happens if the subscription lapses?
The firewall keeps passing traffic, but the subscription services stop updating. Threat intelligence, IPS signatures and sandboxing go stale, which is the point at which the appliance stops protecting you properly.
Compare every model, license, and payment option on our Sophos XGS firewall page.
Get this quoted by Nuformat
Nuformat is a Sophos partner serving Canada and the United States. We stock the full XGS range. Tell us your user count, internet speed and which services you plan to run, and we will confirm the sizing and reply in two to three business days.
Request a quoteSpecifications as published by Sophos. Pricing and availability confirmed by Nuformat at the time of quotation.

