Sold by: SophosÂ
Deployed on AWS
Free Trial
Sophos Firewall for AWS delivers advanced threat protection for AWS environments and assets. Protect networks, applications, ensure security of ingress and egress traffic, and maintain high web-application availability.
4.7
Overview
Sophos Firewall integrates leading technologies into a single next-generation solution without compromising security. Highlights include deep packet inspection with IPS, ATP, URL filtering, and in-depth reporting; Bidirectional AV for WAF with authentication offloading, path-based routing, country-level blocking; and self-service SSL and HTML5 VPRN technologies to make connecting from anywhere and on any device a reality - without administrative overhead.
Preconfigured templates and centralized policy management save time managing user, application and network policies, and provide pre-packaged web filtering, IPS, traffic shaping and app control policies for Active/Active and Active/Passive deployments spanning multiple availability zones.
Sophos synchronized security allows organizations to link endpoints, cloud workloads, and firewall to relay health status and immediately to respond to threats on your network.
Part of a complete SaaS security platform. A selection of Sophos AWS solutions are included below with more at <www.sophos.com/cloud >.
- Deploy auto scaling firewalls in dynamic environments: https://soph.so/utm-autoscaling-paygÂ
- Monitor resource configurations and analyze AWS security groups with Cloud Optix: https://soph.so/cloud-optixÂ
- Neutralize active cyber-attacks with a dedicated team https://soph.so/Rapid-ResponseÂ
If you have questions about Sophos solutions or need assistance with deployment and configuration, contact us at aws.marketplace@sophos.com .
The cloud formation template to deploy Sophos Firewall will optionally collect Sophos Central account credentials (email and password used to login to https://central.sophos.com ). These credentials are used only once by the firewall to connect to Sophos Central and enable management services. This step is optional, and can be performed at any time after deployment, following the instructions available here.
Highlights
- Sophos Firewall combines advanced networking controls, protections such as Intrusion Prevention Systems (IPS) and Web Application Firewall (WAF), plus user and application controls. Saving time taken to deploy and integrate multiple products.
- Web App Firewall (WAF) protects your web apps against common threats like SQL injection and Cross-Site Scripting. Next-Gen Firewall protection and reporting with stateful traffic inspection, Layer-7 application control, secure proxies, and IPS.
- Sophos Firewall includes extensive reporting. Sophos Firewall provides full insights into user and network activity, surfaced using easy-to-understand indicators so you can take preventive measures before problems occur.
Details
Sold by
Categories
Delivery method
Delivery option
Sophos Standalone Firewall for AWS
Sophos Firewall for Gateway Load Balancer
Sophos Auto Scaling Firewall for AWS
Sophos High Availablity Firewall for AWS
Latest version
Operating system
OtherLinux 21.5 GA
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m4.large | $0.58 |
m5.large | $0.58 |
m7i.xlarge | $1.12 |
c4.8xlarge | $2.70 |
c4.large | $0.54 |
c5.large | $0.54 |
c5.xlarge | $1.02 |
c4.4xlarge | $2.10 |
c5.4xlarge | $2.10 |
c4.2xlarge | $1.56 |
Vendor refund policy
Terminate the EC2 instance(s) at any time to stop incurring charges. You may email aws.marketplace@sophos.com for questions regarding Sophos XG Firewall charges and refund requests.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Sophos Standalone Firewall for AWS
This CloudFormation template allows you to deploy a Sophos XG Firewall Standalone. The template will bring up a single XG Firewall instance with two ENI network interfaces attached to the instance, each interface is in a distinct subnet. The first interface is dedicated to the private subnet to be protected by the XG Firewall, the second interface is dedicated to the public/external subnet. The IGW is automatically attache to the public subnet.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Additional details
Usage instructions
You can manage your Sophos XG Firewall on AWS from the Web Interface using HTTPS (TCP port 4444), the command shell using SSH (TCP port 22), and via the API.
Sophos XG Firewall requires a valid email address for administration purposes. This email address is not used for any other purpose and remains local to the Sophos XG Firewall AMI.
Resources
Support
Vendor support
For customers who participate in the AWS Product Support Connection, Sophos provides technical support via phone and web portal. Phone: +1-844-591-2756 Web portal:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Sophos
By Palo Alto Networks
By Juniper Networks
Top
10
In Network Infrastructure, Security
Top
10
In Network Infrastructure
Top
50
In Migration
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Network Traffic Inspection
Deep packet inspection with Intrusion Prevention Systems (IPS) and advanced threat protection capabilities
Web Application Security
Web Application Firewall (WAF) with protection against SQL injection, Cross-Site Scripting, and Layer-7 application control
Security Synchronization
Synchronized security platform linking endpoints, cloud workloads, and firewall for threat response and health status relay
Traffic Management
Preconfigured templates with centralized policy management for user, application, and network policies across multiple availability zones
Authentication and Access Control
Bidirectional antivirus with authentication offloading, path-based routing, and country-level blocking technologies
Network Traffic Inspection
Advanced layer-7 application visibility and control with comprehensive traffic inspection capabilities
Threat Prevention Technology
AI/ML-powered security engine with researcher-grade signatures for detecting known and zero-day threats
Cloud Security Integration
Native integration with AWS infrastructure components including Gateway Load Balancer, Auto Scaling, and Transit VPC
Dynamic Policy Management
Automated policy application using AWS tags, Application IDs, User IDs, geographies, and network zones
Deployment Flexibility
Seamless deployment through EC2 instance creation workflow with cloud-native form factor
Network Security Services
Advanced firewall solution with core firewall, VPN, NAT, and L4-L7 security services
Threat Protection
Intrusion detection and prevention (IPS) with application visibility and control through AppSecure
Cloud Integration
Native integrations with AWS services including Elastic Load Balancer, CloudWatch, Security Hub, and Amazon GuardDuty
Routing Capabilities
Advanced cloud-grade routing with IPsec and full mesh VPN termination services
Protocol-Level Protection
Anti-virus capabilities detecting and blocking malware across POP3, HTTP, SMTP, and FTP protocols
Standard contract
No
No
No
Customer reviews
Higher Education
Rock-Solid Reliability and Outstanding Support from Sophos
Reviewed on Nov 27, 2025
Review provided by G2
What do you like best about the product?
We've been using Sophos firewalls since 2019 and have not had a single hardware failure, failed update or any unscheduled downtime. The migration from XG to XGS was straight forward and almost flawless.
We've had great support from Sophos too. They've provided free in-depth health checks and reviews of our
firewall and endpoint protection configurations and have provided us with helpful recommendations.
We've had great support from Sophos too. They've provided free in-depth health checks and reviews of our
firewall and endpoint protection configurations and have provided us with helpful recommendations.
What do you dislike about the product?
Lack of mDNS/Bonjour support. A key tool when using the Firewall and Endpoint Protection is Sophos Central.
It's really disappointing that synchronization with Google Directory is only possible by purchasing additional
products, that we already have solutions for.
It's really disappointing that synchronization with Google Directory is only possible by purchasing additional
products, that we already have solutions for.
What problems is the product solving and how is that benefiting you?
Sophos XGS, along with their Endpoint Protection, is providing us with excellent network security and reporting. The general time it takes to administer the firewall is less than what we used previously.
Gulshan K.
Comprehensive Security and Performance: My Experience with Sophos Firewall
Reviewed on Nov 21, 2025
Review provided by G2
What do you like best about the product?
Sophos Sophos Firewall user-friendly interface, centralized management, and deep packet inspection, excels with advanced threat protection, ensuring robust security, flexible deployment options for businesses of all sizes and high performance.
What do you dislike about the product?
Sophos Firewall’s , limited third-party integrations, drawbacks include higher pricing for advanced features and occasional complexity in deep configurations. Firmware updates may require downtime, and some users find reporting tools less intuitive compared to other enterprise-grade solutions.
What problems is the product solving and how is that benefiting you?
Sophos Firewall stops cyber threats, secures networks, and boosts productivity
Nilesh G.
Complete Security Solution Sophos firewall
Reviewed on Nov 21, 2025
Review provided by G2
What do you like best about the product?
Sophos which integrates seamlessly with endpoints for real-time threat intelligence. Its user-friendly interface, advanced threat protection, and granular application control make network security management simple yet highly effective,Sophos Firewall is its Synchronized Security feature,
What do you dislike about the product?
Firmware Updates: Occasionally cause minor disruptions or require downtime.
What problems is the product solving and how is that benefiting you?
Enhanced security and simplified management
Dawn A.
Ahead of the Curve with it's DRIP UI,Centralized Mngts & Reliable performance without Resource Drain
Reviewed on Nov 19, 2025
Review provided by G2
What do you like best about the product?
I love it for being ahead of the curve with centralized managed with feature rich functionality from comprehensive threat protection to ensure am fully guarded against any threat and malware. My favorite with web filtering with quick identification of false alerts. Scalability with offering real-time monitoring and protection across our whole IT Infrastructure. Drip interface which add intuitiveness for ease of use and navigation. Grandest with seamless integration to Sophos product with any extract cost adding efficiency. Great customer support which is ready to chip in incase of any critical incidents and attacks and to add juicy with great community support. Dependable for reliable performance without being strenuous on our resources.
What do you dislike about the product?
Invaluable with reliable performance with 24/7 background scanning and monitoring without drain my system resources.
What problems is the product solving and how is that benefiting you?
Dependable on reliable performance without draining our resources with 24/7 background scanning and monitoring.
Monumental for centralized to ensure all our organizational IT infrastructure is completely protected.
Comprehensive with thread protection to keep me guarded all the time from virus and malware.
Excellent with web filtering with efficiency to identify false alerts.
Incredible for incident alerts, protection and prevention.
Support team incase of critical incidents which they come to my rescue.
Monumental for centralized to ensure all our organizational IT infrastructure is completely protected.
Comprehensive with thread protection to keep me guarded all the time from virus and malware.
Excellent with web filtering with efficiency to identify false alerts.
Incredible for incident alerts, protection and prevention.
Support team incase of critical incidents which they come to my rescue.
Pournima G.
All-in-One Dashboard Makes Security Effortless
Reviewed on Nov 19, 2025
Review provided by G2
What do you like best about the product?
The single dashboard that shows me everything I need to know. I can see security events, block malicious traffic, and manage user web access all from one clean interface. It's powerful but doesn't make things complicated.
What do you dislike about the product?
as per i have not facing any challenges it's working fine in my network and its very easy to manage from sophos central.
What problems is the product solving and how is that benefiting you?
We were struggling with constant security alerts from our old system that were mostly false positives. Sophos has dramatically reduced this noise with accurate threat detection. The web filtering has also helped us enforce acceptable use policies effectively. The biggest benefit is the time I save – probably 5-6 hours weekly that I used to spend managing multiple security consoles.