Technical assessment
Critical applications, sites, devices, identities, and dependencies are included in the assessment.
SOPHOS + ADD SOLUTION
Sophos security aligned with your company’s architecture
Firewalls, endpoint protection, detection, and response for distributed environments.
The solution design depends on applications, access requirements, traffic, platforms, licensing, and operational responsibilities.
SOPHOS PORTFOLIO MAPPING
Published firewalls and security families in context.
The published catalog includes six 1U Sophos Firewall XGS appliances, each with official media assets and data sheets. The broader technical inventory tracks 19 current XGS firewalls among 37 physical models across multiple families, plus 13 software, platform, and service entries. Items without exact media assets and regional commercial validation remain in editorial content or in preparation only.
Loading catalog…
SOPHOS + ADD SOLUTION
The right control starts with the environment.
The assessment connects connectivity, segmentation, devices, application access, continuity, and operational capacity.
Architecture and sizing
Inspected traffic, TLS, interfaces, availability, and growth guide the selection.
Explicit licensing
Hardware, base licenses, subscriptions, support, and services are itemized in the scope.
Controlled deployment
Changes, testing, rollback criteria, and responsibilities are planned before the transition.
LAYERED SECURITY
Shared context without promising universal integration.
Network, endpoints, identities, and operations serve distinct purposes. Sophos Fusion is the gradual evolution of Sophos Central; both names and experiences still coexist.
SOPHOS FUSION · CENTRAL
FirewallsPolíticas de acesso, segmentação e inspeção em hardware, software e nuvem.
PREVENTION · DETECTION · RESPONSE
Security Heartbeat and Synchronized Security connect compatible products. Available actions depend on the combination of products, versions, licenses, and configuration.
SophosSophos technology
ADD SOLUTIONAdd Solution engineering
- Consistent policies
- Controlled access
- Visibility
- Structured response
The final selection combines the environment, deployment model, licenses, integrations, and responsibilities—not merely the product name.
HOW ADD SOLUTION HELPS
From discovery to continuity.
The work organizes requirements, architecture, deployment, and operations into verifiable stages.
Descoberta
- Discovery
- Inventory
- Requirements
Preparação
- Architecture
- Sizing and licensing
Entrega
- Deployment
- Validation
Continuidade
- Continuous review
Migrations from XG to XGS, VPN to ZTNA, or legacy consoles and editions require compatibility checks, licensing, testing, and a rollback plan.
NETWORK AND CONNECTIVITY
Protection and connectivity for different layers of the architecture.
Physical families and virtual deployment models must be selected according to their function and the actual scenario.
XGS desktop Gen. 2
Compact firewalls for small businesses and branch offices.
1U rack-mount XGS
Expandable firewalls for distributed enterprise networks.
2U rack-mount XGS
Firewalls for large-scale environments with greater connectivity demands.
Sophos Firewall virtual, software, and cloud
Deployment models without a dedicated XGS appliance.
SD-RED
Extends connectivity from remote sites to Sophos Firewall.
Sophos Switch 100 Series
Gigabit connectivity with 8-, 24-, and 48-port models.
Sophos Switch 200 Series
Multi-gigabit connectivity for the access layer.
Sophos Switch 1000 Series
Copper connectivity up to 10 GbE with PoE.
Sophos Wireless AP6
Wi-Fi 6 and 6E based on the environment, client devices, and capacity requirements.
XGS is the current product line. XG reached end of life on March 31, 2025. Virtual deployment models should not be assumed to inherit the features or high-availability capabilities of physical appliances.
DEVICES, ACCESS, AND RESPONSE
Controls that cover devices, applications, and incidents.
Edition, platform, telemetry, retention, and responsibilities determine the effective capability.
Sophos Endpoint
Protection for devices and servers with centralized management.
Sophos XDR
Investigation and response using context from different controls.
Sophos MDR
Vendor-managed detection and response service.
Sophos NDR
Analysis of suspicious behavior in network traffic.
Sophos ZTNA
Application access authorized according to identity and device posture.
Sophos Workspace Protection
Components that protect browsing, access, and digital work.
Sophos Email
Protection for messages and email flows.
Sophos Fusion (evolution of Sophos Central)
Cloud-based security management and context, with a gradual naming transition.
Sophos Mobile
Management and protection of mobile devices and compatible endpoints.
Sophos MDR is the vendor’s 24/7 service. This does not amount to Add Solution providing its own 24/7 operation or SLA.
PROJECT GUIDANCE
Four decisions before defining the commercial proposal.
FREQUENTLY ASKED QUESTIONS
Factors that affect the technical and commercial decision.
01What is the difference between Sophos XG and XGS?
XGS is the current Sophos Firewall appliance line. XG reached end of life on March 31, 2025. Migration must account for hardware, version, licensing, and configuration.
02Are the earlier XGS desktop models also discontinued?
XGS 87/87w through 136/136w are in the post-end-of-sale period, with end of life announced for September 30, 2030. For new projects, this mapping uses XGS 88 through 138.
03Has Sophos Central changed its name?
Sophos Central is evolving into Sophos Fusion. The change is gradual and should not be described as an immediate, universal discontinuation of Sophos Central.
04Is Intercept X still the endpoint product name?
Sophos Endpoint is the current primary brand. Intercept X remains a historical name in previous materials and contracts.
05How should I choose a firewall model?
Consider traffic with controls enabled, TLS inspection, sessions, VPN, interfaces, availability, and growth. User counts or maximum throughput figures alone are not sufficient.
06Does the appliance include every service?
No. Hardware, the base license, protection subscriptions, and support are separate components. The proposal must specify the items, term, and requirements.
07Are XDR and MDR the same?
XDR provides investigation and response capabilities; MDR adds a vendor-managed service. Data sources, permissions, and responsibilities must be defined.
08Do the products respond to threats together?
Integrations can share context and coordinate actions, but behavior depends on compatibility, versions, licenses, and configuration.
09Is AP6 managed through Sophos Firewall?
AP6 uses cloud management and an individual local interface. It should not be confused with APX. Confirm the subscription required for centralized management.
10What should the proposal include?
Products, licenses, terms, integrations, deployment stages, responsibilities, service hours, channels, and service levels for the contracted service.
PROJETO SOPHOS
Vamos dimensionar a tecnologia para o seu ambiente.
Compartilhe o contexto da operação, quantidade de usuários, localidades e objetivos do projeto. A equipe Add Solution direcionará a conversa para especialistas em arquitetura, dimensionamento, licenciamento e implantação Sophos.
- Comparação técnica entre modelos e famílias
- Arquitetura, alta disponibilidade e integrações
- Licenciamento, serviços de segurança e ciclo de vida
Define the next step for your security.
Tell us what you need to protect, how teams access systems, and where the main challenges lie.
