What Sophos Firewall bundles are available?

Before you buy a Sophos Firewall, you should definitely take a look at the Sophos Firewall bundles first. We’ll show you in more detail here which bundles are available and how they differ. A bundle can be worthwhile for you, especially in terms of price.

Topics

Sophos Firewall – XGS Hardware Bundles

If you have decided to purchase an XGS firewall appliance with Sophos Firewall OS, the following bundles are available:

Standard Protection
Xstream Protection
Epic Protection

Standard Protection

The Standard Protection Bundle includes the following modules:

Base License
Network Protection
Web Protection
Enhanced Support

Xstream Protection

The Xstream Protection Bundle includes the following modules:

Base License
Network Protection
Web Protection
Enhanced Support
Zero-Day Protection
Central Orchestration

Epic Protection

The Epic Protection Bundle includes the following modules:

Base License
Network Protection
Web Protection
Enhanced Support
Zero-Day Protection
Central Orchestration
Email Protection
Webserver Protection

When is a bundle the right choice?

As soon as you need two or more modules for your firewall, the bundle is worth it in any case. So before you buy the hardware and licenses separately, do the math.

Enhanced Support is always included in the XGS bundles. So if you buy an XGS Firewall and Network Protection separately, you only have a one-year warranty on the hardware and a limited number of free updates! You can also purchase Enhanced Support in our store at any time. In a bundle, however, everything comes together cheaper.

Sophos Standard Protection vs. Xsteam Protection

The majority of our customers opt for the Standard Protection Bundle in the long term. The modules included are listed above. However, Sophos has the 99% promo, which looks very attractive at first glance. This often results in the purchase of modules that are not really needed in order to get a little more discount on the hardware.

With the Sophos promo, which is limited in time but has been continuously extended for 5 years, you get the following offer: When you buy Xstream Protection for 3 years, you get a 99% discount on the firewall hardware appliance.

The promo competes with the annual subscription with Standard Protection and, depending on the model, the hardware appliance is available at a discount of up to 80%.

At first glance, the Xstream Protection Promo is therefore the better deal. However, we have the following thoughts for you:

The financial view

The Xstream Protection license is paid for 3 years and depending on the company, such an investment and upfront payment is not possible.

The additional features

The additional functions of Xstream Protection compared to Standard Protection are Zero-Day Protection and Central Orchestration and are not required by most customers. But why? Xstream Protection is therefore not worthwhile. Well, it depends. Take a look at the functions and decide for yourself:

Sophos Zero-Day Protection uses advanced technologies such as real-time JavaScript emulation and behavioral analysis to detect and block complex cyber threats. However, activation requires specific prerequisites such as TLS inspection to analyze traffic and a 15-minute cloud analysis for downloads to ensure protection against advanced malware and zero-day threats. Very few admins want to annoy users with the 15 minutes and prefer to let the download through. The endpoint from Sophos also offers sufficiently good protection and technologies and also supports more files. Sophos Intelix is a free online tool that can also perform such an analysis.
Central Orchestration simplifies SD-WAN management of VPN connections and network structures, especially with more than four firewalls, where manual configurations become complex. It enables the efficient setup of full mesh, hub-and-spoke models and tunnel setups, improves network performance and resilience and saves time. For networks with up to four firewalls, manual VPN connections are still viable, but beyond that Sophos offers a time-saving and performance-enhancing solution.
Sophos Central Firewall Reporting Advanced: The Central Orchestration license includes a light version of Sophos Central Firewall Reporting Advanced, which provides in-depth security insights with 30 days of firewall data storage capacity through predefined and customizable reports, complemented by storage expansion options to ensure long-term access to critical data. Here we recommend the full version of Sophos Central Firewall Reporting Advancend, which stores the logs for up to one year. In most cases, insurance companies require at least 6 months anyway, making the upgrade to the full version mandatory.