First Buy or Renewal

Were we able to help you with this tutorial? Then consider us for the next Renewal. 😎
We sell licenses for all Sophos Firewalls worldwide!

To the Products

Upgrading SFOS firmware on a Sophos Firewall

In this guide, we will show you how to upgrade your XG Firewall firmware to the latest version.

Info: We assume in this guide that you are using a Sophos Firewall with the SFOS and that it is associated with a valid Sophos ID. Before you follow these instructions and install an update to your firewall, be sure to make a backup. You should never assume that after an update everything always works perfectly.

Download SFOS firmware manually

Before you can install the new firmware on the firewall, you must first download it from the Sophos Licensing Portal.

Note: If you have Sophos Premium Support (included with every bundle), you can also download the latest firmware automatically from the GUI of your Sophos Firewall. Jump right to the next section: Install SFOS firmware automatically.

  1. Log in to https://id.sophos.com with your Sophos ID.
  2. Select MySophos from the list under My Applications in the menu.
  3. Click on Network Protection.
  4. Click on View Devices.
  5. Choose your device from the list which you want to update to the latest version and click on Download.
  6. A pop-up window displays the latest firmware versions. Choose the one that suits you best and click on Download.
  7. Finally accept the EULA (End User License Agreement) and the file will be downloaded.

The above steps once again explained with screenshots:

Install SFOS firmware manually

The downloaded firmware can now be installed on Sophos Firewall.

  1. Log in to your XG firewall.
  2. Click in the navigation on Backup & Firmware.
  3. Under the section Firmware you will find a list of the available versions. Click on the upload icon.
  4. The “Firmware Upgrade/Downgrade” pop-up window then appears. Select the firmware from your computer and click Upload Firmware or Upload & Boot.

The above steps once again explained with screenshots:

Note: Consider carefully which variant you choose. With Upload Firmware only the file is transferred from your computer to the firewall, while with Upload & Boot the firewall will start with the latest firmware.

If you have opted for Upload Firmware, you can determine the time of the update yourself. In the Firmware section, click on the icon with the two arrows as soon as the time for the installation is right.

Install SFOS firmware manually

Install SFOS firmware automatically

If you have a valid license for Sophos Enhanced Support, you can save yourself the hassle of the above steps. Enhanced Support provides automatic updates with a single click directly in the GUI of your firewall.

Note: If you can’t wait for a new firmware version to appear automatically on your firewall after it has been released, you can of course update at any time with the manual version.

Info: If you have set up an HA cluster, we recommend that you always choose the Upload & Boot option. This will update the two firewalls one after the other and there will be no interruption in your network.

  1. Log in to your XG firewall.
  2. Click in the navigation on Backup & Firmware.
  3. Click under the section Latest Available Firmware at the listed update on Download.
  4. Once the download is complete, you can start the installation by clicking on Install.