Sold by: Sophos
Deployed on AWS
Sophos Firewall for AWS delivers advanced threat protection for AWS environments and assets. Protect networks, applications, ensure security of ingress and egress traffic, and maintain high web-application availability.
4.7
Overview
Sophos Firewall integrates leading technologies into a single next-generation solution without compromising security. Highlights include deep packet inspection with IPS, ATP, URL filtering, and in-depth reporting; Bidirectional AV for WAF with authentication offloading, path-based routing, country-level blocking; and self-service SSL and HTML5 VPRN technologies to make connecting from anywhere and on any device a reality - without administrative overhead.
Preconfigured templates and centralized policy management save time managing user, application and network policies, and provide pre-packaged web filtering, IPS, traffic shaping and app control policies for Active/Active and Active/Passive deployments spanning multiple availability zones.
Sophos synchronized security allows organizations to link endpoints, cloud workloads, and firewall to relay health status and immediately to respond to threats on your network.
Part of a complete SaaS security platform. A selection of Sophos AWS solutions are included below with more at https://www.sophos.com/en-us/public-cloud .
- Deploy auto scaling firewalls in dynamic environments: https://soph.so/utm-autoscaling-payg
- Monitor resource configurations and analyze AWS security groups with Cloud Optix: https://soph.so/cloud-optix
- Neutralize active cyber-attacks with a dedicated team https://soph.so/Rapid-Response
If you have questions about Sophos solutions or need assistance with deployment and configuration, contact us at aws.marketplace@sophos.com .
The cloud formation template to deploy Sophos Firewall will optionally collect Sophos Central account credentials (email and password used to login to https://central.sophos.com ). These credentials are used only once by the firewall to connect to Sophos Central and enable management services. This step is optional, and can be performed at any time after deployment, following the instructions available here.
Highlights
- Sophos XG Firewall combines advanced networking controls, protections such as Intrusion Prevention Systems (IPS) and Web Application Firewall (WAF), plus user and application controls. Saving time taken to deploy and integrate multiple products.
- Web App Firewall (WAF) protects your web apps against common threats like SQL injection and Cross-Site Scripting. Next-Gen Firewall protection and reporting with stateful traffic inspection, Layer-7 application control, secure proxies, and IPS.
- Sophos Firewall includes extensive reporting. Sophos Firewall provides full insights into user and network activity, surfaced using easy-to-understand indicators so you can take preventive measures before problems occur.
Details
Sold by
Categories
Delivery method
Delivery option
Sophos Standalone Firewall for AWS
Sophos Firewall GWLB (Deprecated - use PAYG)
Latest version
Operating system
OtherLinux 22.0 GA
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Terminate the EC2 instance(s) at any time to stop incurring charges. You may email aws.marketplace@sophos.com for questions regarding Sophos XG Firewall charges and refund requests.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Sophos Standalone Firewall for AWS
This CloudFormation template allows you to deploy a Sophos XG Firewall Standalone. The template will bring up a single XG Firewall instance with two ENI network interfaces attached to the instance, each interface is in a distinct subnet. The first interface is dedicated to the private subnet to be protected by the XG Firewall, the second interface is dedicated to the public/external subnet. The IGW is automatically attache to the public subnet.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Additional details
Usage instructions
You can manage your Sophos XG Firewall on AWS from the Web Interface using HTTPS (TCP port 4444), the command shell using SSH (TCP port 22), and via the API.
Sophos XG Firewall requires a valid email address for administration purposes. This email address is not used for any other purpose and remains local to the Sophos XG Firewall AMI.
Resources
Support
Vendor support
Sophos provides technical support via phone and web portal as part of your BYOL subscription. Phone: +1-844-591-2756 Web portal:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Sophos Cloud UTM9 is nearing end-of-life and will not be supported after 30 June 2026. Sophos recommends using Sophos Firewall on AWS.
Sophos Firewall for AWS delivers advanced threat protection for AWS environments and assets. Protect networks, applications, ensure security of ingress and egress traffic, and maintain high web-application availability.
Sophos Cloud UTM9 is nearing end-of-life and will not be supported after 30 June 2026. Sophos recommends using Sophos Firewall on AWS.
Sophos Cloud UTM9 is nearing end-of-life and will not be supported after 30 June 2026. Sophos recommends using Sophos Firewall on AWS.
Customer reviews
hemlata m.
Easy-to-Manage Sophos Firewall with Strong Security from a Single Dashboard
Reviewed on Jun 19, 2026
Review provided by G2
What do you like best about the product?
sophos firewall is easy to manage and provide strong security in your internet enviroment, easy manage policy and others features like VPN, web filtering from single sophos central dashboard,
What do you dislike about the product?
in sophos some advanced configurations can be complex for new users, reporting section could be mnore customization option, and firmware update may require careful planning to avoid disruption.
What problems is the product solving and how is that benefiting you?
Sophos Firewall helps us protect our network from cyber threats, unauthorised access, and malicious websites. It also provides secure remote access through VPN, improves visibility into network traffic, and helps us enforce security policies consistently across the organisation.
Omar S.
Sophos is Firewall Excellent Network Visibility and Control
Reviewed on Jun 18, 2026
Review provided by G2
What do you like best about the product?
What I value most about Sophos Firewall is the visibility it gives us into network traffic, along with how easy it is to identify and control applications, users, and threats from a single management console. The web filtering and application control policies are straightforward to set up and manage, which helps us respond quickly to incidents while still maintaining a secure environment without significantly affecting user productivity.
What do you dislike about the product?
Although our overall experience with Sophos Firewall has been positive, there are still a few areas where it could be improved. Some advanced configurations take multiple steps and can feel overly complex for less experienced administrators. In addition, the reporting and analytics tools would benefit from more customization options and a more flexible way to present data.
We have also found that major updates require careful planning to reduce operational impact and maintain compatibility with existing configurations. In certain situations, troubleshooting more advanced issues may demand a deep technical understanding of the platform.
Even with these considerations, the advantages in security, visibility, and control clearly outweigh the limitations we’ve identified.
We have also found that major updates require careful planning to reduce operational impact and maintain compatibility with existing configurations. In certain situations, troubleshooting more advanced issues may demand a deep technical understanding of the platform.
Even with these considerations, the advantages in security, visibility, and control clearly outweigh the limitations we’ve identified.
What problems is the product solving and how is that benefiting you?
Sophos Firewall helps us tackle several key security and network management challenges. It gives us clear, comprehensive visibility into network traffic, so we can identify applications, users, and potential threats in real time. With that insight, we’re able to make better-informed decisions, enforce security policies more consistently, and respond quickly when we see suspicious activity.
It also supports tighter control over web access, better management of application usage, and stronger protection against malware, ransomware, and other cyber threats. By bringing these capabilities together in a single platform, Sophos Firewall streamlines administration and reduces the complexity that often comes with managing network security.
It also supports tighter control over web access, better management of application usage, and stronger protection against malware, ransomware, and other cyber threats. By bringing these capabilities together in a single platform, Sophos Firewall streamlines administration and reduces the complexity that often comes with managing network security.
Damián Y.
Easy-to-Manage Firewall with Excellent Visibility and Seamless Sophos Central Integration
Reviewed on Jun 18, 2026
Review provided by G2
What do you like best about the product?
What I like most about Sophos Firewall is its ease of management, the visibility it provides across the network, and its integration with Sophos Central. I also value its security capabilities, application control, web filtering, and threat protection, as they make network management simpler and more efficient from a single platform.
What do you dislike about the product?
What I dislike most about Sophos Firewall is that some advanced configurations can require a longer learning curve and are not always fully intuitive. It would also be helpful to have better interactive guidance, more detailed visibility into certain events, and an AI assistant to speed up configuration and troubleshooting.
What problems is the product solving and how is that benefiting you?
Sophos Firewall helps protect the network against threats, control access to applications and websites, segment traffic, and improve visibility across the infrastructure. This allows us to reduce risk, manage security more centrally, and respond faster to incidents.
Oil & Energy
Security and management with Sophos
Reviewed on Jun 18, 2026
Review provided by G2
What do you like best about the product?
Intuitive graphical interface, which allows for simple and centralized management even of complex configurations. Many users appreciate the ease of use and the speed with which it is possible to implement and modify security policies. From a security perspective, Sophos offers comprehensive protection thanks to advanced features such as IPS/IDS, web filtering, application control, VPN, and protection against malware and advanced threats. Integration with the Sophos ecosystem (endpoint, MDR, etc.) also allows for a unified view of security and an automatic response to incidents.
What do you dislike about the product?
Initial setup is not straightforward, especially for those without experience with advanced firewalls.
Possible performance drops when all security features are active.
Reporting could be improved and is less flexible compared to other competitors.
Possible performance drops when all security features are active.
Reporting could be improved and is less flexible compared to other competitors.
What problems is the product solving and how is that benefiting you?
vpn, security, browsing
Aadi C.
Robust Security with User-Friendly Setup
Reviewed on Jun 18, 2026
Review provided by G2
What do you like best about the product?
I find Sophos Firewall to be an excellent product with great quality and performance. It provides advanced threat protection, web filtering, and real-time monitoring, which significantly improve our overall security. I like how it helps block malicious traffic and cyber threats in real time. The user-friendly interface and the very easy initial setup are also standout features for me.
What do you dislike about the product?
The 'temper protection' could be improved as it requires a password to disable protection.
What problems is the product solving and how is that benefiting you?
I use Sophos Firewall to improve overall security with advanced threat protection, web filtering, and real-time monitoring. It blocks malicious traffic and cyber threats, providing a user-friendly interface.