Can Sophos Firewall modules be bought individually?

Yes. Network, Web, Zero-Day Protection, and Central Orchestration can be purchased separately, as can Email Protection and Web Server Protection. DNS Protection and NDR Essentials are only available in the Xstream bundle.

Are Sophos licenses monthly or multi-year?

Both. Monthly subscriptions offer flexibility, while fixed 1, 3, and 5-year terms lock in pricing and avoid renewal gaps.

Sophos XGS · Renewals

Sophos XGS licensing, in plain terms.

Every Sophos Firewall ships with a perpetual Base License. What you renew is the protection subscription on top of it, either Standard or Xstream, plus support. Here is what each covers so you renew the right one. Buy below, or ask us to size it.

Buy now ↓ Get a quote

Looking for a specific model or SKU? Use the search bar at the top of the page. Or browse the options below.

Capability	What it does
Standard, monthly	Network and Web Protection with Enhanced Support, billed monthly. Good when you want to stay flexible or spread cost.
Xstream, monthly	The full Xstream bundle, billed monthly. The recommended protection with the flexibility of a rolling term.
Standard, multi-year	Network and Web Protection with Enhanced Support on a fixed 1, 3, or 5-year term that locks pricing and avoids renewal gaps.
Xstream, multi-year	The full Xstream bundle on a fixed 1, 3, or 5-year term. The best long-term value for most networks.
Email Protection	On-box anti-spam, antivirus, data loss prevention, and SPX encryption, with a built-in mail transfer agent for continuity. Sold on its own, not part of a bundle.
Web Server Protection (WAF)	A web application firewall that hardens servers and business apps against hacking, with reverse proxy, SSL offloading, and templates for common apps. Sold on its own.

Buy below ↓Get a quote

What is the Base License?+

It is the perpetual license included with every Sophos Firewall. It covers networking, the Xstream architecture, SD-WAN, unlimited IPsec and SSL VPN, and wireless. You still need to add support or a bundle to get firmware updates and Sophos Focus management.

What is the difference between Standard and Xstream?+

Standard Protection adds Network Protection, Web Protection, and Enhanced Support. Xstream Protection adds everything in Standard plus Zero-Day Protection, Central Orchestration, DNS Protection, and NDR Essentials. Xstream is the recommended bundle for most networks.

Can I buy modules individually?+

Yes. Network, Web, Zero-Day Protection, and Central Orchestration can be bought on their own, as can Email Protection and Web Server Protection. DNS Protection and NDR Essentials are only available in the Xstream bundle.

Monthly or multi-year?+

Both. Monthly subscriptions give flexibility; fixed 1, 3, and 5-year terms lock in pricing and avoid renewal gaps. Tell us your preference and we will quote both.

Buy renewals below Pick an option to add to cart, or request a quote for volume and monthly pricing.