-
Sophos Webserver Protection add-on - 1 year subscription - SS430012ZZNCAA
BUY$1,611.30MSRP: $1,866.32 -
Sophos Webserver Protection add-on - 1 year subscription - SS210012ZZNCAA
BUY$421.48MSRP: $487.90 -
Sophos Webserver Protection add-on - 1 year subscription - SS230012ZZNCAA
BUY$596.14MSRP: $690.44 -
Sophos Webserver Protection add-on - 1 year subscription - SS310012ZZNCAA
BUY$769.98MSRP: $892.16 -
Sophos Webserver Protection add-on - 1 year subscription - SS330012ZZNCAA
BUY$1,073.38MSRP: $1,243.12
Sophos XGS Add-on Subscriptions
Add exactly the protection you need.
Most businesses take the Standard or Xstream bundle, but you can also license Sophos Firewall modules individually. That is how you add Email Protection or a web application firewall, build custom protection module by module, or upgrade your support. Every module is tied to your firewall model, so we match it to your appliance.
Not sure what to add? Get a quote with your firewall serial, or call 1-833-283-7373.
A la carteLicense modules on their own
Model-specificMatched to your firewall
Same expiryAligned to your renewal
We size itBy serial number
The modules you can add.
Each can be licensed on its own, on top of your base license or an existing bundle. Use search to find the SKU for your firewall model, or ask us to quote it by serial.
| Module | What it adds | Available as | Buy |
|---|---|---|---|
| Network Protection | Intrusion prevention (IPS), advanced threat protection, and the Security Heartbeat link to Sophos Endpoint. Also enables Sophos Central management. | Individual or bundle | Shop |
| Web Protection | Web filtering and application control backed by SophosLabs intelligence, across every port and protocol. | Individual or bundle | Shop |
| Zero-Day Protection | Machine learning, cloud sandboxing, and threat intelligence to stop new ransomware and targeted attacks. | Individual or bundle | Shop |
| Central Orchestration | Xstream SD-WAN VPN orchestration and advanced Central Firewall Reporting with 30-day retention. | Individual or bundle | Shop |
| Email Protection | On-box anti-spam, antivirus, data loss prevention, and encryption for mail through the firewall. | Individual add-on only | Shop |
| Web Server Protection (WAF) | Web application firewall with reverse proxy and SSL offloading to harden servers and business apps. | Individual add-on only | Shop |
| DNS Protection | Cloud DNS filtering that blocks malicious and unwanted domains across all ports and protocols. | Xstream bundle only | Get Xstream |
| NDR Essentials | AI-powered network detection and response that spots threats hidden in encrypted traffic. | Xstream bundle only | Get Xstream |
Subscriptions are model-specific and tied to your firewall serial number. If a search does not show the exact SKU for your model, send us your serial and we will match it.
Two things worth knowing before you add a module.
Some features are bundle-only
DNS Protection and NDR Essentials are not sold as individual modules. They come only with the Xstream Protection bundle, so if you need either, Xstream is the route rather than adding modules one by one.
You still need support for updates
To receive firmware updates and full Sophos Central management, a firewall needs a support subscription (Enhanced or Enhanced Plus) or a protection bundle. A Base License plus a single module may not cover updates, so we check this when we quote.
Individual modules, or a bundle?
A quick way to decide which route fits.
Adding Email or Web Server Protection? Individual.
These are only sold as add-ons, so you license them on top of whatever you run.
Want the full feature set? Xstream bundle.
Most businesses find the Xstream bundle simpler and better value than assembling modules, and it includes the bundle-only features.
Just need one capability? Individual.
If you only need, say, Web Protection on a specific firewall, a single module keeps it lean.
1
quote, matched to your firewall
Send us your firewall model and serial and tell us what you want to add. We will confirm compatibility, align the term to your renewal date, quote it, and reply in two to three business days.
Add-on subscription questions.
Can I buy Sophos Firewall modules individually?
Yes. Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, Email Protection, and Web Server Protection can all be licensed individually. Email Protection and Web Server Protection are only ever sold as individual add-ons.
Which features cannot be bought as add-ons?
DNS Protection and NDR Essentials are bundle-only. They come with the Xstream Protection bundle rather than as standalone modules.
Are add-on subscriptions tied to a specific firewall?
Yes. Sophos Firewall subscriptions are model-specific and tied to the appliance serial number, which is why we confirm compatibility before quoting.
Do I need support along with a module?
To get firmware updates and full Sophos Central management, a firewall needs a support subscription or a protection bundle. We check your current coverage when we quote so there are no gaps.
Should I add modules or move to a bundle?
If you only need one capability, or you need Email or Web Server Protection, individual modules make sense. If you want the full feature set, including the bundle-only features, the Xstream bundle is usually simpler and better value. We will price both.
Add the right module to your firewall.
Send us your firewall model and serial and what you want to add. We will confirm compatibility, align the term to your renewal, quote it, and reply in two to three business days. Browse add-on subscriptions below.