Buying a Sophos XGS firewall is only half the decision. The appliance is the hardware; the protection subscription is what lets it inspect traffic, block threats and filter the web. Sophos sells that protection in two bundles, and for most schools, nonprofits and small offices the one to start with is Sophos Standard Protection.
This guide covers what Standard Protection includes, how it differs from the more expensive Xstream Protection bundle, and what it costs for every XGS model Genesis Technologies carries.
What Is Sophos Standard Protection?
Standard Protection is a one-year subscription bundle for Sophos Firewall. Instead of licensing each module separately, you get the core pieces most networks need in a single license tied to your XGS appliance:
- Base License. The firewall platform itself: networking, wireless, the Xstream architecture, Xstream SD-WAN, unlimited remote-access VPN and site-to-site VPN.
- Network Protection. The Xstream TLS and deep packet inspection engine, intrusion prevention (IPS), Advanced Threat Protection, Security Heartbeat and SD-RED management.
- Web Protection. Web security and filtering plus application control, so you can see and control what users reach and which apps use your bandwidth.
- Enhanced Support. 24/7 support access, firmware and feature updates, and advance replacement of the appliance hardware for the length of the term.
Every Standard Protection license also includes Sophos Central management and reporting at no extra charge: group firewall management, backup management, firmware update scheduling, a ZTNA gateway, and cloud firewall reporting with seven days of storage.
Who Standard Protection Is Built For
Standard Protection fits organizations that need dependable day-to-day protection and web control without paying for features they will not use. Typical buyers include:
- K-12 schools and districts that need web filtering and application control on student networks.
- Nonprofits and churches protecting a single office or a few locations on a fixed budget.
- Small and mid-sized businesses that want secure remote access and site-to-site VPN without a separate VPN product.
Standard Protection vs Xstream Protection
Xstream Protection includes everything in Standard and adds Sophos's advanced threat and orchestration features. Here is the side-by-side:
| Feature | Standard | Xstream |
|---|---|---|
| Base License: firewall, networking, wireless, Xstream SD-WAN, unlimited remote-access and site-to-site VPN | ✓ | ✓ |
| Network Protection: IPS, Advanced Threat Protection, Security Heartbeat, SD-RED management | ✓ | ✓ |
| Web Protection: web security and filtering, application control | ✓ | ✓ |
| Enhanced Support: 24/7 support, firmware and feature updates, advance hardware replacement | ✓ | ✓ |
| Sophos Central management and 7-day cloud firewall reporting | ✓ | ✓ |
| Zero-Day Protection: machine learning and cloud sandboxing | — | ✓ |
| DNS Protection | — | ✓ |
| Central Orchestration: SD-WAN/VPN orchestration, 30-day advanced reporting, MDR/XDR connection | — | ✓ |
| Active Threat Response, third-party threat feeds, NDR Essentials | — | ✓ |
When Standard Is Enough
If your goal is a well-managed firewall with IPS, web filtering, VPN and support, Standard covers it. Most small networks, single-site schools and branch offices fall here.
When to Step Up to Xstream
Choose Xstream if you want files sandboxed before they reach users, need DNS-layer protection, manage several sites through SD-WAN orchestration, or already use (or plan to use) Sophos MDR or XDR. On the smaller appliances the difference is often under $200 a year.
Sophos Standard Protection Pricing
Standard Protection is priced by appliance model. Wireless (w) models cost the same as their wired equivalents. All prices are for a one-year subscription; click a price to go to that product.
| XGS Model | Standard (1 Year) | Xstream (1 Year) |
|---|---|---|
| XGS 88 | $235 | $305 |
| XGS 88w | $235 | $305 |
| XGS 108 | $324 | $418 |
| XGS 108w | $324 | $418 |
| XGS 118 | $514 | $665 |
| XGS 118w | $514 | $665 |
| XGS 128 | $680 | $886 |
| XGS 128w | $680 | $886 |
| XGS 138 | $1,075 | $1,395 |
| XGS 2100 | $2,260 | $3,050 |
| XGS 2300 | $3,385 | $4,570 |
| XGS 3100 | $4,375 | $5,900 |
| XGS 3300 | $5,483 | $8,224 |
| XGS 4300 | $9,150 | $12,350 |
| XGS 4500 | $12,895 | $17,400 |
How Ordering Works
Each license is tied to one specific XGS appliance, so choose the subscription that matches your model exactly. Have your appliance serial number ready when you order. Renewing an existing subscription? The same products are used for renewals.
Need the hardware too? Genesis Technologies also carries the Sophos XGS appliances themselves, from the desktop XGS 88 up to the rack-mount XGS 4500.
Ready to Order
Genesis Technologies is a Sophos Silver Partner and has supplied software and security to schools, nonprofits, government and small business for years. If you are licensing several firewalls, or are not sure which appliance or bundle fits, talk to us first.
- Sophos Standard Protection for XGS 88, $235.00
- Sophos Standard Protection for XGS 118, $514.00
- Sophos Standard Protection for XGS 2100, $2,260.00
Buying for a district, a campus or multiple sites? Contact the Genesis Technologies team for a volume quote, or call 800-433-6326.
