Compare Sophos Firewall Home Edition and Sophos Home
Sophos is mostly used in corporate environments. Nevertheless, there are also useful options for private use and home labs: the free Sophos Firewall Home Edition as a software firewall, an XGS Appliance selected for the intended use and lifecycle, or Sophos Home as endpoint protection for Windows and macOS.
These options should not be confused. Home Edition is not a license for a Sophos hardware appliance. Sophos Home is not a Sophos Fusion (formerly Sophos Central) enterprise endpoint. An XGS Appliance without a security subscription can still operate as a firewall, but it does not provide the protection of a fully licensed deployment.
Which Sophos variant is suitable?
The right variant depends largely on the goal:
- Home network or home lab with its own hardware: The Sophos Firewall Home Edition is suitable if a separate computer or a deliberately prepared VM can be overwritten.
- Sophos hardware at home or in the lab: An XGS Appliance can be cleaner than old PC hardware. Select the appliance category for the required capacity and interfaces, then verify the exact model’s lifecycle, Base License, support, updates, and security subscriptions.
- Protect Windows or macOS devices privately: Sophos Home is the right consumer product. It is not the same as Sophos Fusion Endpoint.
- Protect a production business environment: Use the standard Sophos Firewall licensing model. Home Edition and assumptions based on personal use aren’t appropriate here.
For production business environments, always check licensing, support, warranty, update entitlement, and the required security modules. The basics are covered in Understanding the Sophos Firewall Base License and Which Sophos Firewall bundles are available?.
Sophos Firewall Home Edition
The Sophos Firewall Home Edition is a free software version of the Sophos Firewall for private use. The variant is particularly suitable for home labs, technology enthusiasts and private networks in which a dedicated firewall is to be operated.
Typical applications:
- Home network with separate firewall hardware
- Homelab or test environment
- private learning environment for Sophos Firewall
- Remote access or VLAN testing outside a customer’s production environment
The installation method is important: Home Edition comes with its own operating system. During installation, existing data on the target system is overwritten. That’s why you need a separate, dedicated computer or a deliberately prepared virtual environment.
Requirements and limits
For the Sophos Firewall Home Edition you need:
- Intel compatible computer,
- at least two network interfaces,
- a separate drive or a system that can be overwritten,
- sufficient network knowledge for routing, DHCP, DNS, NAT and firewall rules.
Home Edition has a fixed limit of 4 CPU cores. The computer may have more cores, but Home Edition won’t use them. Sophos confirmed on May 20, 2025 that the previous RAM limit had been removed. The value 4 Cores / 6 GB RAM, which still appears in older material, is therefore current only with regard to the CPU. On an existing installation, the removed RAM restriction only takes effect after a restart. Schedule it for a maintenance window because internet access will be interrupted. Afterwards, verify that the expected RAM is recognized and that the firewall and internet service work.
More RAM does not automatically make a Home Edition installation faster. CPU performance, network cards, storage, drivers, VPN load, activated security functions and clean network design remain crucial.
Support also differs from a business firewall. Sophos directs Home Edition users to the Sophos Firewall Community. This is suitable for personal use and testing, but it doesn’t replace a production support process.
XGS Appliance with Base License
Some private or very small setups use a Sophos XGS Appliance instead of their own hardware. This can be technically cleaner than an old PC because the appliance, ports, and platform are clearly defined. Choose the appliance category according to the required throughput, interfaces, and operating period; only then select an exact model whose lifecycle and support status cover that period.
However, the models must be clearly distinguished:
- The Sophos Firewall Home Edition does not run as a free home license on a Sophos appliance.
- An XGS Appliance has a Base License, but not all security subscriptions automatically.
- Firmware updates, support, RMA and protection features depend on the specific license and support status.
- For production use, simply asking “is the firewall running?” isn’t enough.
Basic firewall functions are possible in the base license variant, for example:
- Create firewall rules
- IPsec and SSL VPN for remote access
- Site-to-site IPsec connections
- basic routing and NAT
- Sophos Wireless for older APX scenarios, not for AP6 cloud-only operation
For regular firmware updates, after the free initial updates Enhanced Support or appropriate support authorization is relevant. The update classification can be found in article Sophos Firewall Updates will no longer be free in the future.
Don’t confuse the protection scope with the Base License
Sophos describes Home Edition as a fully equipped software version and lists anti-malware, web security and URL filtering, application control, IPS, traffic shaping, VPN, reporting, and monitoring among its features. This is an important difference from an XGS Appliance running with only a Base License.
With a Base License or an appliance that isn’t fully licensed, check which protection features are actually subscribed and active. Depending on the license, the following may be missing or limited:
- Synchronized Security or Security Heartbeat,
- Sophos Zero-Day Protection,
- certain security subscriptions,
- manufacturer support and RMA entitlement,
- defined update and lifecycle processes.
This isn’t necessarily a problem in a home lab. It is critical in production, however: a firewall without current updates, suitable protection modules, or monitoring can create a false sense of security.
Download Sophos Firewall Home Edition
Request the ISO directly from Sophos. Open the following product page and complete the current registration or sign-in and download process shown there:
Store the download, credentials, and any issued license or serial details securely. Before installation, decide which device will be fully overwritten, which ports will be WAN and LAN, and how to restore internet access. Write the ISO to bootable media or attach it to a prepared VM, assign the target drive and interfaces after booting, and complete the WebAdmin setup wizard. For production firewalls, use a carefully planned Sophos Firewall Getting Started process instead.
Run and verify Home Edition with SFOS 22
Home Edition uses the same web admin console as Sophos Firewall. Before moving to SFOS 22, Sophos recommends taking a configuration backup and scheduling a maintenance window. Under Backup & firmware > Firmware, the Active icon identifies the running version. Use Check for new firmware to look for an available version, Download to retrieve it, and Install to validate and install it. The firewall restarts, so internet access is interrupted.
SFOS 22 introduces an additional prerequisite: Before upgrading an unclaimed software or virtual firewall, you must first claim it in Sophos Fusion. Check registration and license synchronization under Administration > Licensing. According to the SFOS 22 help, an internet-connected firewall synchronizes its license automatically every 24 hours; Synchronize triggers an immediate check.
After an installation or update, don’t stop at checking the version number. Also verify that the WAN connection and default gateway are active, DNS resolution works, and deliberately configured VPNs and firewall rules still behave as expected. Before restoring a backup, make sure the SFOS versions are compatible and have the backup encryption password and Secure Storage Master Key available when required.
If SFOS 22 isn’t offered, first check whether the installation has been claimed in Sophos Fusion and whether the target version is compatible with the active version. If firmware can be downloaded but not installed, check the license status under Administration > Licensing. The general SFOS help limits version changes without a support subscription after three free upgrades; it explicitly exempts pattern updates, hotfixes, reimaging, and mandatory upgrades. Don’t infer business support entitlement for Home Edition from these rules: Sophos provides product-specific Home Edition help exclusively through the Sophos Firewall Community.
A missing interface usually indicates an incompatible adapter or driver, or a disconnected virtual adapter. If WebAdmin is unreachable, check the LAN port, client IP, cable, local firewall, and management network. If WebAdmin works but internet access does not, check the WAN link, address assignment, default gateway, and DNS before the firewall rule and NAT. Change one item at a time and retest.
Sophos Home for private endpoints
In addition to a firewall, endpoint protection is still needed on Windows and macOS devices. Sophos Fusion is intended for companies. For private use, Sophos offers the separate product Sophos Home.
Sophos Home is not a replacement for a Sophos Firewall license and is not a full enterprise Sophos Fusion Endpoint setup. It is a consumer product for personal devices. The current website offers a free trial and multi-year Premium subscriptions. Premium protects up to ten Windows and Mac computers and includes malware and ransomware protection, web protection, central device management, and Premium Support. Check current terms and supported operating system versions with Sophos before buying.
Use the Sophos Home portal for registration, trial downloads, purchases, and device management:
Sign in or create an account, then use the currently available registration and download option or purchase a subscription. Run the correct installer on each personal computer from the same account. Remove other real-time antivirus software first and restart if required. Afterwards, confirm in the portal that the device is protected and check its local status, last scan, and intended web or family policy. If it does not appear, verify the source account, internet access, date and time; an active competing antivirus, unsupported OS, or pending restart are common installation blockers. Finally, start a scan and confirm that a temporary policy change reaches the correct device after synchronization.
Practical recommendation
The Sophos Firewall Home Edition is useful for private tests and learning environments. It provides a genuine Sophos Firewall experience without requiring a business subscription. For long-term operation at home, effort, power consumption, hardware condition, backups, updates and community support should still be planned realistically.
For a small hardware appliance, consider not only the purchase price but also support, updates, subscriptions, and lifecycle. The exact model and revision, its current milestone, and a supported SFOS branch matter. End of Sale ends normal sales; End of Life ends vendor support and updates. A used appliance with an unverifiable status is a poor internet-perimeter choice.
Match the label with WebAdmin, record license and support entitlements, and use the Sophos product lifecycle calendar to compare the planned end of use with the announced end-of-life date. Choose a supported successor if use would continue beyond it or the status cannot be established. Otherwise, still document the firmware path, backup, replacement option, and migration date. Anyone operating an XGS Appliance without a bundle should also understand what the Base License provides.
Checklist
- Only install Home Edition on dedicated hardware or deliberately prepared VM.
- Before installation, ensure that no required data is overwritten.
- Plan at least two network interfaces.
- Take into account the CPU limit of the Home Edition and do not use older RAM information without checking.
- Plan for community support instead of business support.
- For XGS Appliances, check the Base License, support, and security subscriptions separately.
- Document the XGS Appliance model, SFOS support, and end-of-life date before purchase or continued operation.
- Do not apply Home Edition assumptions to production environments.
- Plan endpoint protection separately, for example with Sophos Home for private devices or Sophos Fusion Endpoint in the corporate environment.