Sold by: Sophos
Deployed on AWS
Free Trial
Sophos Firewall for AWS delivers advanced threat protection for AWS environments and assets. Protect networks, applications, ensure security of ingress and egress traffic, and maintain high web-application availability.
Overview
Sophos Firewall integrates leading technologies into a single next-generation solution without compromising security. Highlights include deep packet inspection with IPS, ATP, URL filtering, and in-depth reporting; Bidirectional AV for WAF with authentication offloading, path-based routing, country-level blocking; and self-service SSL and HTML5 VPRN technologies to make connecting from anywhere and on any device a reality - without administrative overhead.
Preconfigured templates and centralized policy management save time managing user, application and network policies, and provide pre-packaged web filtering, IPS, traffic shaping and app control policies for Active/Active and Active/Passive deployments spanning multiple availability zones.
Sophos synchronized security allows organizations to link endpoints, cloud workloads, and firewall to relay health status and immediately to respond to threats on your network.
Part of a complete SaaS security platform. A selection of Sophos AWS solutions are included below with more at www.sophos.com/cloud .
- Deploy auto scaling firewalls in dynamic environments: https://soph.so/utm-autoscaling-payg
- Monitor resource configurations and analyze AWS security groups with Cloud Optix: https://soph.so/cloud-optix
- Neutralize active cyber-attacks with a dedicated team https://soph.so/Rapid-Response
If you have questions about Sophos solutions or need assistance with deployment and configuration, contact us at aws.marketplace@sophos.com .
The cloud formation template to deploy Sophos Firewall will optionally collect Sophos Central account credentials (email and password used to login to https://central.sophos.com ). These credentials are used only once by the firewall to connect to Sophos Central and enable management services. This step is optional, and can be performed at any time after deployment, following the instructions available here.
Highlights
- Sophos Firewall combines advanced networking controls, protections such as Intrusion Prevention Systems (IPS) and Web Application Firewall (WAF), plus user and application controls. Saving time taken to deploy and integrate multiple products.
- Web App Firewall (WAF) protects your web apps against common threats like SQL injection and Cross-Site Scripting. Next-Gen Firewall protection and reporting with stateful traffic inspection, Layer-7 application control, secure proxies, and IPS.
- Sophos Firewall includes extensive reporting. Sophos Firewall provides full insights into user and network activity, surfaced using easy-to-understand indicators so you can take preventive measures before problems occur.
Details
Sold by
Categories
Delivery method
Delivery option
Sophos Standalone Firewall for AWS
Sophos Firewall for Gateway Load Balancer
Sophos Auto Scaling Firewall for AWS
Sophos High Availablity Firewall for AWS
Latest version
Operating system
OtherLinux 20.0 MR2
Deployed on AWS
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m4.large | $0.58 |
m5.large | $0.58 |
m7i.xlarge | $1.12 |
c4.8xlarge | $2.70 |
c4.large | $0.54 |
c5.large | $0.54 |
c5.xlarge | $1.02 |
c4.4xlarge | $2.10 |
c5.4xlarge | $2.10 |
c4.2xlarge | $1.56 |
Vendor refund policy
Terminate the EC2 instance(s) at any time to stop incurring charges. You may email aws.marketplace@sophos.com for questions regarding Sophos XG Firewall charges and refund requests.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Sophos Standalone Firewall for AWS
This CloudFormation template allows you to deploy a Sophos XG Firewall Standalone. The template will bring up a single XG Firewall instance with two ENI network interfaces attached to the instance, each interface is in a distinct subnet. The first interface is dedicated to the private subnet to be protected by the XG Firewall, the second interface is dedicated to the public/external subnet. The IGW is automatically attache to the public subnet.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Additional details
Usage instructions
You can manage your Sophos XG Firewall on AWS from the Web Interface using HTTPS (TCP port 4444), the command shell using SSH (TCP port 22), and via the API.
Sophos XG Firewall requires a valid email address for administration purposes. This email address is not used for any other purpose and remains local to the Sophos XG Firewall AMI.
Resources
Support
Vendor support
For customers who participate in the AWS Product Support Connection, Sophos provides technical support via phone and web portal. Phone: +1-844-591-2756 Web portal:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
HostedScan Security
By HostedScan
HostedScan provides 24x7 alerts and detection for security vulnerabilities.
VPN Server PPTP/L2TP-IPSec-PSK with Web Interface
By ADEO Imaging
High-Performance VPN Server on Linux with user management Control Web Panel. It designed to provide the secure internet access for computers, mobile devices and routers. Easy-to-use. After launching, this VPN server is immediately fully operational. No server setup required. This VPN server has a user-friendly web-based user control panel that allows you to add, delete, or edit user entries. Suitable for use by individuals as well as for companies offering VPN services.
Continually monitor public cloud infrastructure to provide visibility of resources and threats across your organization and proactively reduce business risk from unsanctioned activity, vulnerabilities, and misconfigurations, while helping to optimize cloud spend.
DokuWiki - Documentation Wiki Platform powered by TurnKey Linux (HVM)
By TurnKey GNU/Linux
TurnKey DokuWiki helps save you time and money by providing a ready-to-run DokuWiki solution that is secure, supported and easy to maintain. The system auto-updates itself with security fixes and is built in a transparent 100% open source process free of hidden backdoors.
Customer reviews
Siddhant S.
Sophos is Action: Real-World Experience and Evaluation
Reviewed on Jun 12, 2025
Review provided by G2
What do you like best about the product?
One of the most valuable aspects is its integration with Sophos Endpoint is ease of implementation, number of features and ease of integration. This real time communication between endpoint and firewall allows automatic isolation of compromised devices, significantly reducing threat response time.
What do you dislike about the product?
While Sophos offers application control, its DPI engine sometimes lacks the granularity and detection accuracy seen in next-gen competitors like Palo Alto or Fortinet, especially for encrypted or evasive traffic.
What problems is the product solving and how is that benefiting you?
Sophos Firewall integrates multiple security layers—including next-gen firewall (NGFW), intrusion prevention system (IPS), web filtering, application control, and advanced threat protection—all in one interface.
Leave a comment0 comments
Utilities
Strong Performance And Integration Define Sophos Solution, Though Cloud Management can be improved
Reviewed on Jun 11, 2025
Review provided by G2
What do you like best about the product?
We really like performance vs price which is really good, tight integration with Sophos solutions and a very clear roadmap for the platform evolution. We really appreciate how easy it is to use and how simple and fast was its implementation.
What do you dislike about the product?
Cloud management of complex infrastructure must be improved, Waf feauture is obsolete and Ips feature can be improved
What problems is the product solving and how is that benefiting you?
We need to manage of a complex network infrastructure composed of multiple subnets more than 10 (connected from 40gb to a single gb), on which all security controls are carried out, starting from dns protection and arriving at the inspection via TLS of each packets by applying multiple threat detection controls. Furthermore, integrating with the Sophos MDR suite allows us to mitigate risks that derive from an endpoint compromise. The solution has allowed us to obtain an very good level of security without impacting on performance with an easy but effective management.
Florian G.
We use the appliance, easy to handle and maintain.
Reviewed on Jun 11, 2025
Review provided by G2
What do you like best about the product?
We use the appliance exclusively as a web proxy for outgoing internet traffic. It is easy to handle and maintain. We have rarely had problems, and the implementation in our complex environment went relatively smoothly.
What do you dislike about the product?
The appliance requires a lot of storage space for logs, with a minimum of 200 GB for one month of logs, with an average of 700 users who are online for about 8 hours a day.
What problems is the product solving and how is that benefiting you?
We have the need to operate many different internal networks with varying requirements and policies. However, this was successfully implemented with the Sophos Firewall Appliance.
Boyd K.
Advanced firewall protection with streamlined network management
Reviewed on Jun 11, 2025
Review provided by G2
What do you like best about the product?
It gives tight network protection and the resources within with a user friendly interface. The security heartbeat and synchronized application control makes Sophos Firewall stand out from the rest!
What do you dislike about the product?
It doesn't have a feature for administrators to stop a computer on the network that is congesting the bandwidth
What problems is the product solving and how is that benefiting you?
In the past we used to have zero-day exploits and remote access challenges of network resources for employees especially during COVID-19 pandemic. Sophos Firewall uses AI-powered threat intelligence (Sophos X-Ops) and deep packet inspection to block known and emerging threats in real time. The VPN SSL connection and now the latest Zero Trust Network Access (ZTNA) has provided for secure remote connections.
Ashish P.
Mixed Experience on product & Service for Sophos
Reviewed on Jun 10, 2025
Review provided by G2
What do you like best about the product?
XDR Ecosystem, Intercept X (Next-Gen Endpoint Protection), Sophos Firewall (Zero Trust Ready), Sophos MDR (Managed Detection & Response), Centralized Cloud Management, Phish Threat (Human Firewall Training), Ease of Use, Ease of implementation,customer support, product reliabilty & user interface
What do you dislike about the product?
Heavy resource usage (CPU/RAM) during scans, slowing down older machines on end point security & Limited Automation in MDR
What problems is the product solving and how is that benefiting you?
1. Advanced Threat Protection Against Evolving Cyberattacks
(AI/ML-powered IPS and sandboxing to block unknown malware. TLS 1.3 inspection decrypts malicious traffic without performance loss. Synchronized Security with endpoints to auto-isolate infected devices.)
2. Secure Remote Work & Hybrid Workforce (VPN-less Zero Trust Network Access (ZTNA) for secure remote access.,SD-WAN optimizes bandwidth for cloud apps (e.g., Teams, Zoom).
3. Cost-Effective Network Consolidation ( All-in-one platform (firewall, web filtering, email security) reduces vendor sprawl. Centralized cloud management lowers IT overhead.)
4. Lack of IT Security Expertise (Intuitive dashboard with guided remediation.Optional MDR service for 24/7 threat hunting.)
(AI/ML-powered IPS and sandboxing to block unknown malware. TLS 1.3 inspection decrypts malicious traffic without performance loss. Synchronized Security with endpoints to auto-isolate infected devices.)
2. Secure Remote Work & Hybrid Workforce (VPN-less Zero Trust Network Access (ZTNA) for secure remote access.,SD-WAN optimizes bandwidth for cloud apps (e.g., Teams, Zoom).
3. Cost-Effective Network Consolidation ( All-in-one platform (firewall, web filtering, email security) reduces vendor sprawl. Centralized cloud management lowers IT overhead.)
4. Lack of IT Security Expertise (Intuitive dashboard with guided remediation.Optional MDR service for 24/7 threat hunting.)