Buying a Sophos Firewall isn’t only about the hardware. The licence decides what the firewall can actually do. Here’s a plain-language guide to the Base License, Xstream Protection and Xstream Plus, based on Sophos’s published licensing details.
Base License
Every Sophos Firewall needs a Base License. It comes with hardware appliances, and has to be bought separately for virtual, software-only or cloud deployments. A support subscription is needed for firmware updates, cloud management and reporting, and technical support, so don’t assume these come with the box.
Xstream Protection
This is the bundle Sophos recommends as a starting point, along with Xstream Plus. It includes:
- Network protection: TLS and deep packet inspection, IPS and Active Threat Response.
- Web protection: web security and control, and application control.
- Zero-day protection: machine learning, sandboxing and file analysis.
- Central orchestration: SD-WAN and VPN orchestration, and reporting for up to 30 days.
- DNS Protection and NDR Essentials: these are only available in the bundles.
- Enhanced Support: 24/7 access to Sophos support, firmware updates and advanced hardware replacement during the term.
Xstream Plus
Xstream Plus includes everything in Xstream Protection, and adds:
- Sophos Workspace Protection: Protected Browser, ZTNA, DNS Protection for endpoints and the Email Monitoring System. The number of user licences included depends on the firewall model.
- Longer reporting: up to one year of reporting data.
- Enhanced Plus Support: includes priority case handling and some remote consulting hours.
It’s sold on term licences with upfront purchase.
How to choose
- Xstream Protection suits most offices that want full protection at the network edge.
- Xstream Plus is worth comparing if you have remote staff who need secure access to applications, or if you need reports going back further than 30 days.
Before renewing, check what your current licence includes and when it expires. A firewall with an expired subscription may be missing protection you assume is there.
How Pentacle IT Solutions can help
As a Sophos Gold Partner, we help businesses across Uttar Pradesh choose the right model and licence, then set up and support it. Tell us about your office and we’ll quote for your setup.
