Both bundles start with the Base License, Network Protection, Web Protection, and Enhanced Support. Xstream Protection adds Zero-Day Protection, which is cloud sandboxing and AI threat analysis, plus Central Orchestration for SD-WAN and multi-firewall management. If you want the full stack with the least tuning, Xstream is the one Sophos recommends. If you only need core firewall, IPS, and web filtering, Standard covers it. You can also buy the appliance on its own and add subscriptions later.

Yes. We carry the XGS 2100 as a hardware-only appliance and as a bundle with Standard or Xstream Protection in 1, 3, and 5 year terms. Hardware only makes sense if you already hold a valid subscription to move over, or you are standing up a spare or high-availability unit. Keep in mind the appliance needs an active subscription to pull firmware and threat updates, so most buyers pair it with a bundle. Not sure which way to go? Talk to a Sophos-certified expert and we'll size it with you.

Renewals match the bundle you run today, either Standard or Xstream Protection, in 1, 3, or 5 year terms. Renew before your current license lapses so IPS, web filtering, and firmware updates never stop. Send us your appliance serial number or the order it shipped on and we'll pull the exact renewal SKU. Multi-year renewals bring down your cost per year compared with renewing every 12 months.

Yes. Firewalls.com is a Sophos Platinum Partner, so every XGS 2100 appliance and license we sell is genuine, registered to you, and backed by Sophos support. That partner status also means our reps are Sophos-certified and can help with sizing, licensing, and configuration, not just the checkout.

The XGS 2100 ships with 8 GbE copper ports and 2 SFP fiber ports, with ports 1 and 2 acting as a bypass pair for fail-to-wire uptime. There is one Flexi Port expansion bay for an optional module when you need more copper, more fiber, or higher-speed uplinks, which takes the appliance up to 18 ports. Console access is over RJ45 or Micro USB, with a dedicated management port and two USB 3.0 ports. SFP transceivers are sold separately.