First Buy or Renewal

Were we able to help you with this tutorial? Then consider us for the next Renewal. 😎
We sell licenses for all Sophos Firewalls worldwide!

To the Products

Creating or restoring a Sophos SFOS backup

In this article, we will show you how to back up and restore a Sophos XG Firewall using the Sophos Firewall OS.

Note: In any case, we recommend that you back up the XG Firewall regularly. With a backup, you can easily install the configuration on new hardware in an emergency and be up and running again within a very short time. A backup can also help you to go back to an earlier version if you made a mistake during configuration.

Create backup

Log in to your XG firewall and select Backup & Firmware in the left navigation.

Create a backup of the SFOS configuration

Manual backup

If you want to backup your firewall quickly and easily, just click on Backup Now. You can then download the backup to your computer.

Automatic backup

So that you don’t always have to perform these backups manually, you can set the XG to create a daily, weekly or monthly backup of the config. Under Frequency select your desired option and then click on Apply to save the settings.

The automatically generated backups can be stored either locally on the firewall or on an FTP. The third option is to send the backups by email. Unfortunately, in contrast to UTM, it is not possible to encrypt the backups here, which is why we do not recommend this method at this time.

Update: Starting with SFOS version 17.5.4, backups can now also be encrypted on the XG firewall. From our point of view, there is no longer anything to be said against having the backups sent to you by email.

Restore backup

Log in to your XG firewall and select Backup & Firmware in the left navigation.

Import older version

Under the section Backup & Restore you can simply select the file on your computer and click on the button Upload and Restore.

Restore backup to new XG firewall

When you first run a Sophos Firewall with the SFOS, it has the default IP address Connect your computer to the XG firewall via the LAN port and give your computer the IP address for example. Then you can access your XG Firewall with the browser of your choice via the address

Once you have completed the wizard and logged in to the new firewall, all you need to do is follow the steps under Import Older Version.