
Overview
Video 1
Sophos Cloud UTM9 is a AWS Security Competency approved NextGen Firewall solution that helps customers with their shared security responsibilities by offering multiple layers of protection in a single virtual appliance that scans, controls and reports on traffic entering and leaving a VPC.
Security features include a Web Application Firewall (WAF), a pre-tuned and automatically updated Intrusion Prevention System (IPS), an Outbound Web Proxy/ Layer 7 Application Engine to protect and control connections to the Public Internet, an Advanced Threat Protection engine to identify and block unknown and evasive threats, and VPN Gateway features to securely connect remote sites and users. The UTM9 NextGen Firewall solution also provides detailed logs and reports which can be viewed on system and/or exported to the AWS CloudWatch Logs service and any Syslog compatible device.
You can deploy Sophos UTM as a standalone solution on the EC2 Instance type of your choice, or use the Sophos provided CloudFormation template to deploy an Active/Passive High Availability pair of UTM's that spans across multiple Availability Zones and integrates with key AWS services such as Auto Scaling, CloudWatch, and S3 to comply with AWS Best Practice guidance on secure architecture.
Part of a complete cloud security portfolio. A selection of Sophos AWS Marketplace offerings is included below, while more can be found at www.sophos.com/cloud .
- Sophos UTM Auto Scaling: https://soph.so/utm-autoscaling-paygÂ
- Sophos XG Firewall Standalone (Free Trial): https://soph.so/xg-firewall-paygÂ
- Sophos Cloud Optix (CSPM with Free Tier): https://soph.so/cloud-optixÂ
If you have any questions about Sophos solutions or if you need assistance with deployment or configuration, please contact the Sophos Public Cloud team at aws.marketplace@sophos.com .
Highlights
- Control infrastructure and security costs by combining multiple security tools into a single, easy to deploy and manage solution.
- Web App Firewall (WAF) protects your web apps against common threats like SQL injection and Cross-Site Scripting. Next-Gen Firewall protection and reporting with stateful traffic inspection, Layer-7 application control, secure proxies, and IPS.
- Sophos UTM9 may also be deployed as an Active/Active Auto Scaling solution which provides maximum uptime, elasticity and the Sophos Outbound Gateway (OGW) feature set. Please see the 'Sophos UTM9 Auto Scaling' listing for more details.
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Cost/hour |
---|---|
m4.large Recommended | $0.76 |
c4.xlarge | $0.90 |
c5.9xlarge | $2.25 |
c3.xlarge | $0.90 |
m4.xlarge | $1.15 |
m3.xlarge | $1.10 |
m5.xlarge | $1.15 |
m4.2xlarge | $1.50 |
m5.2xlarge | $1.50 |
m3.2xlarge | $1.45 |
Vendor refund policy
Terminate the EC2 instance(s) or delete the CloudFormation stack at any time to stop incurring charges. You may email aws.marketplace@sophos.com for questions regarding Sophos UTM charges and refund requests.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
You can manage your Sophos UTM on AWS from the Web Interface using HTTPS (TCP port 4444), the command shell using SSH (TCP port 22), and via the RESTful API.
Sophos UTM requires a valid email address for administration purposes. This email address is not used for any other purpose and remains local to the Sophos UTM AMI. Please refer to the Sophos Privacy Policy for more details. https://www.sophos.com/en-us/legal/sophos-group-privacy-policy.aspxÂ
Sophos UTM on AWS Quick Start Guide https://www.sophos.com/en-us/medialibrary/PDFs/documentation/SophosUTMAWS.pdfÂ
For additional information about deploying on AWS please see: https://www.sophos.com/en-us/support/documentation/sophos-utm.aspxÂ
Resources
Support
Vendor support
For customers who participate in the AWS Product Support Connection, Sophos provides technical support via phone and web portal. Phone: +1-844-591-2756 Web portal:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Standard contract
Customer reviews
Seamless integration, enhanced security, and good pricing
What is our primary use case?
Currently, I have Sophos UTM. I don't remember the details. I know it's about management. I have monitoring from Sophos, alongside the Sophos firewall and Sophos antivirus. Sophos manages the service, with people monitoring my network, including the data from my endpoints and firewalls. They can alert me if there is a security risk. I purchase this service through a distributor in Colombia because the service offers direct management and monitoring.
What is most valuable?
This integration of the antivirus and the firewall works together to enhance security. Integration is key in securing my system.
What needs improvement?
With artificial intelligence, there is room for improvement in all antivirus and security software. However, the bad actors are also improving their methods by using artificial intelligence.
For how long have I used the solution?
I have been using the solution since 2014 or 2015.
How are customer service and support?
Sometimes, I communicate with Sophos support. It was hard for me to talk with them since my English is not as good as American English.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I used WatchGuard before. WatchGuard was used as part of Azure's antivirus suite. Although all firewalls work similarly, the integration of antivirus and firewall from one company decided my preference for Sophos.
How was the initial setup?
The people who sold me the solution helped me configure everything.
What about the implementation team?
The installation was done by one engineer. Inside my company, two or three people worked with him to deploy it, including my boss, a technician, and myself.
What's my experience with pricing, setup cost, and licensing?
The value between what I receive and what I pay is the best in the industry.
What other advice do I have?
I definitely recommend Sophos. I rate it a nine out of ten.Â
Other firewall companies do not have antivirus development as well as Sophos. Sophos is unique in this regard, having developed its antivirus before the firewall, and now both are very good.
Network protection strengthens through effective threat management features and secure access control
What is our primary use case?
I have been using Sophos UTMÂ for the past six years to protect the network at my organization. I use it for my customers and to secure our internal infrastructure.
What is most valuable?
The zero-day protection and firewall rules are some of the most effective features for threat management. I can set the rules and features, and also use IPsec to connect all my on-premises servers and link them to Sophos UTMÂ so that they are protected even when in the cloud.Â
Additionally, I use it to control access into the building through a captive portal integrated across all the PCs we have, ensuring secure access only for authenticated users.
What needs improvement?
I would love to see artificial intelligence capabilities integrated into Sophos UTM. This would help reduce reliance on external support.
For how long have I used the solution?
I have been using the solution for the past six years.
What do I think about the stability of the solution?
There have been no issues with the stability of Sophos UTM.
What do I think about the scalability of the solution?
There have been no problems with the scalability of the solution.
How are customer service and support?
The technical support by Sophos is amazing, especially when I pay for the enhanced support. I receive maximum attention and it is a good system.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have been using these boxes for a long time now, all the way from CyberRoam until we migrated to Sophos.
How was the initial setup?
The initial setup was easy because I have been using these boxes for a long time. The operator provided an option to send someone down, however, I worked with them remotely and we were done with configuration in 30 minutes to an hour.
What about the implementation team?
They just sent somebody. However, I was able to handle most of it myself remotely due to my previous experience.
What's my experience with pricing, setup cost, and licensing?
Pricing has become expensive recently due to the dollar hike and naira value changes in Nigeria. Even though it's expensive, I consider Sophos a major first line of protection, so I pay for it nonetheless.
What other advice do I have?
I've been recommending Sophos UTM to others, and I would continue to do so.Â
Overall, I would rate the solution a nine out of ten.
Which deployment model are you using for this solution?
Enhances security by providing intuitive firewall policy settingsÂ
What is our primary use case?
The primary use case for the solution is as a perimeter protection firewall, which includes functionalities such as VPN, web control, and traffic inspection. It is used in various customer environments, providing comprehensive security management and network protection.
What is most valuable?
The platform's most valuable features include the integrated multifactor authentication (OTP) for VPNs, which enhances security, and the flexible and intuitive firewall policy settings that simplify management.
What needs improvement?
Enhancing the user interface to achieve the same level of flexibility as the older UTM interface could improve the product. The current XG interface needs to be more consistent during configuration.
For how long have I used the solution?
I have been using Sophos UTM for 15 years.Â
What do I think about the stability of the solution?
The solution is stable. I rate it a ten for stability.
What do I think about the scalability of the solution?
The solution is highly scalable, especially with VM offerings, though it can be pricey. I rate scalability as eight or nine.
How are customer service and support?
The customer service and support for Sophos UTM have been exceptional. The developer community is also valuable, offering substantial support and insights.
Which solution did I use previously and why did I switch?
I previously used solutions like FireGuard and WatchGuard but switched to Sophos for its comprehensive features and superior user interface.
How was the initial setup?
The initial setup for basic functions is very straightforward and can be completed in less than an hour. However, advanced configurations can become challenging.
What about the implementation team?
Our in-house team manages the deployment. We seek help from third-party MSPs with expertise in complex configurations.
What's my experience with pricing, setup cost, and licensing?
The product pricing and licensing are higher, but they offer good value for the features and stability provided.
Which other solutions did I evaluate?
I evaluated other options including Fortinet FortiGate, but found Sophos to be more suited to our needs at the time due to its ease of use and robust feature set.
What other advice do I have?
The platform requires regular monitoring. Overall, I rate it a ten.Â
Protects endpoint equipment and offers protection against any infiltration in the network
What is our primary use case?
We use Sophos UTM for our organization's network security.
What is most valuable?
The most valuable feature of Sophos UTM is the endpoint protection feature.
What needs improvement?
The technical support team’s response time could be improved.
For how long have I used the solution?
I have been using Sophos UTM since 2018.
What do I think about the stability of the solution?
I rate the solution ten out of ten for stability.
What do I think about the scalability of the solution?
We use the solution daily in our organization.
I rate the solution ten out of ten for scalability.
Which solution did I use previously and why did I switch?
I previously used Kaspersky. I switched to Sophos UTM because of the features that it is offering.
How was the initial setup?
On a scale from one to ten, where one is difficult and ten is easy, I rate the solution’s initial setup ten out of ten.
What about the implementation team?
The solution's deployment took a week for the first time because our organization is big and has over 300 endpoint equipment. It takes a few hours to do the renewals now. We deployed Sophos UTM from the Active Directory. Three people were involved when we deployed the solution for the first time.
What's my experience with pricing, setup cost, and licensing?
You cannot really say that the solution is expensive, given the protection it gives.
What other advice do I have?
Sophos UTM has improved our network's threat detection and response. It has been good so far because we don't have many attacks. We use the solution's web filtering feature for our organization's security. We use the firewall to protect our endpoint equipment and protect against any infiltration in our network. We also use the solution’s VPN feature.
Around one or two people are required for the solution’s maintenance. I would recommend the solution to other users because it has helped us. The solution's installation and deployment are seamless, and its protection is secure.
Overall, I rate the solution ten out of ten.