Sold by: SophosÂ
Deployed on AWS
Sophos Firewall for AWS delivers advanced threat protection for AWS environments and assets. Protect networks, applications, ensure security of ingress and egress traffic, and maintain high web-application availability.
Overview
Sophos Firewall integrates leading technologies into a single next-generation solution without compromising security. Highlights include deep packet inspection with IPS, ATP, URL filtering, and in-depth reporting; Bidirectional AV for WAF with authentication offloading, path-based routing, country-level blocking; and self-service SSL and HTML5 VPRN technologies to make connecting from anywhere and on any device a reality - without administrative overhead.
Preconfigured templates and centralized policy management save time managing user, application and network policies, and provide pre-packaged web filtering, IPS, traffic shaping and app control policies for Active/Active and Active/Passive deployments spanning multiple availability zones.
Sophos synchronized security allows organizations to link endpoints, cloud workloads, and firewall to relay health status and immediately to respond to threats on your network.
Part of a complete SaaS security platform. A selection of Sophos AWS solutions are included below with more at <www.sophos.com/cloud >.
- Deploy auto scaling firewalls in dynamic environments: https://soph.so/utm-autoscaling-paygÂ
- Monitor resource configurations and analyze AWS security groups with Cloud Optix: https://soph.so/cloud-optixÂ
- Neutralize active cyber-attacks with a dedicated team https://soph.so/Rapid-ResponseÂ
If you have questions about Sophos solutions or need assistance with deployment and configuration, contact us at aws.marketplace@sophos.com .
The cloud formation template to deploy Sophos Firewall will optionally collect Sophos Central account credentials (email and password used to login to https://central.sophos.com ). These credentials are used only once by the firewall to connect to Sophos Central and enable management services. This step is optional, and can be performed at any time after deployment, following the instructions available here.
Highlights
- Sophos XG Firewall combines advanced networking controls, protections such as Intrusion Prevention Systems (IPS) and Web Application Firewall (WAF), plus user and application controls. Saving time taken to deploy and integrate multiple products.
- Web App Firewall (WAF) protects your web apps against common threats like SQL injection and Cross-Site Scripting. Next-Gen Firewall protection and reporting with stateful traffic inspection, Layer-7 application control, secure proxies, and IPS.
- Sophos Firewall includes extensive reporting. Sophos Firewall provides full insights into user and network activity, surfaced using easy-to-understand indicators so you can take preventive measures before problems occur.
Details
Sold by
Categories
Delivery method
Delivery option
Sophos Standalone Firewall for AWS
Sophos Firewall GWLB (Deprecated - use PAYG)
Latest version
Operating system
OtherLinux 21.5 GA
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Terminate the EC2 instance(s) at any time to stop incurring charges. You may email aws.marketplace@sophos.com for questions regarding Sophos XG Firewall charges and refund requests.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Sophos Standalone Firewall for AWS
This CloudFormation template allows you to deploy a Sophos XG Firewall Standalone. The template will bring up a single XG Firewall instance with two ENI network interfaces attached to the instance, each interface is in a distinct subnet. The first interface is dedicated to the private subnet to be protected by the XG Firewall, the second interface is dedicated to the public/external subnet. The IGW is automatically attache to the public subnet.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Additional details
Usage instructions
You can manage your Sophos XG Firewall on AWS from the Web Interface using HTTPS (TCP port 4444), the command shell using SSH (TCP port 22), and via the API.
Sophos XG Firewall requires a valid email address for administration purposes. This email address is not used for any other purpose and remains local to the Sophos XG Firewall AMI.
Resources
Support
Vendor support
Sophos provides technical support via phone and web portal as part of your BYOL subscription. Phone: +1-844-591-2756 Web portal:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Sophos Cloud UTM9 is nearing end-of-life and will not be supported after 30 June 2026. Sophos recommends using Sophos Firewall on AWS.
Sophos Cloud Firewall (PAYG)
By Sophos
Sophos Firewall for AWS delivers advanced threat protection for AWS environments and assets. Protect networks, applications, ensure security of ingress and egress traffic, and maintain high web-application availability.
Sophos Cloud UTM9 is nearing end-of-life and will not be supported after 30 June 2026. Sophos recommends using Sophos Firewall on AWS.
Sophos Cloud UTM9 is nearing end-of-life and will not be supported after 30 June 2026. Sophos recommends using Sophos Firewall on AWS.
Customer reviews
0 ratings
0 AWS reviews
|
57 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Mechanical or Industrial Engineering
Good centralized security solution
Reviewed on Aug 22, 2025
Review provided by G2
What do you like best about the product?
A clear menu navigation and rules.
What do you dislike about the product?
The licenses should be cheaper, as many SMEs will not be able to afford them in the near future.
What problems is the product solving and how is that benefiting you?
The security in the company network is thereby better protected.
Transportation/Trucking/Railroad
Very good product with questionable pricing and mediocre support
Reviewed on Aug 22, 2025
Review provided by G2
What do you like best about the product?
Good interaction between different components of Sophos (Firewall, RED, Access Points, ...), good configuration options to ensure IT security, many different features combined in one device, after initial difficulties with the Sophos Firewall software, the problems have been pretty much resolved with the latest updates.
What do you dislike about the product?
The pricing policy of Sophos has worsened in recent years, new components such as access points, which now have to be managed via Central, are not fully compatible with older ones, making a mixed environment almost impossible and forcing you to replace all existing components when expanding. The support has also deteriorated in recent years, employees speak very poor English and are hardly understandable on the phone.
What problems is the product solving and how is that benefiting you?
Simple configuration to increase network security, good interaction of the individual Sophos components
Javier P.
Greater Visibility to my Web Browsing
Reviewed on Aug 08, 2025
Review provided by G2
What do you like best about the product?
The ease of locating the different configurations and the ease of setting up the networks, as well as the speed with which they can be configured, since on other devices it takes a long time to save a configuration, as I use it daily to monitor web browsing and the behavior of my internet links.
What do you dislike about the product?
What needs to be restarted when the firmware is updated.
What problems is the product solving and how is that benefiting you?
Greater visibility to web browsing reports and greater visibility of network logos and the behavior of my users.
Ing. Karl K.
Sophos Firewall XGS a complete set for small and medium-sized enterprises
Reviewed on Aug 01, 2025
Review provided by G2
What do you like best about the product?
It works and is easy to use.
What do you dislike about the product?
Updates must be watched for and the changelogs must be read. Since this offers a complete set of functions, quite a few things always change.
What problems is the product solving and how is that benefiting you?
As a company, providing a comprehensive solution is sometimes not so easy, but Sophos offers a complete package in this area that goes beyond the firewall and can be easily integrated with other components.
Florian G.
We use the appliance, easy to handle and maintain
Reviewed on Jun 11, 2025
Review provided by G2
What do you like best about the product?
We use the appliance exclusively as a web proxy for outgoing internet traffic. It is easy to handle and maintain. We have rarely had problems, and the implementation in our complex environment went relatively smoothly.
What do you dislike about the product?
The appliance requires a lot of storage space for logs, with a minimum of 200 GB for one month of logs, with an average of 700 users online for about 8 hours a day.
What problems is the product solving and how is that benefiting you?
We have the need to operate many different internal networks with varying requirements and policies. However, this was successfully implemented with the Sophos Firewall Appliance.