Both bundles include the base license, Network Protection, Web Protection, and Enhanced Support. Xstream Protection adds Zero-Day Protection (cloud sandboxing) and Central Orchestration for SD-WAN and multi-firewall management. For most enterprise deployments we recommend Xstream Protection, since it turns on the full threat stack the 8500 is built to run. Both come in 1, 3, and 5 year terms.

You can buy it either way. The hardware only appliance ships without a subscription, which suits customers moving an existing license or standardizing on their own terms. Most buyers choose an appliance and protection bundle together, Standard or Xstream, so the firewall arrives ready to run. Not sure which fits? Talk to a Sophos certified expert and we'll help you size the license.

Yes. Like the rest of the XGS 2U range, the 8500 supports active/passive and active/active high availability, so a second unit can take over without dropping traffic. On top of HA at the appliance level, each 8500 has dual redundant NVMe SSDs plus hot swappable power, storage, and fans, so a single component failure doesn't take the firewall offline.

It's the top model in the XGS line, made for large enterprises, data center edges, and campus networks with the heaviest traffic and the tightest uptime requirements. If your throughput needs are lower, the XGS 5500, 6500, or 7500 may be a better fit at a lower cost. We'll help you match the model to your real traffic instead of overbuying.

Yes. Beyond the built in 8 x GbE copper, 12 x SFP+ 10 GbE fiber, and 2 x QSFP28 ports, the 8500 has Flexi Port bays and high density module slots that take it to a maximum of 70 ports. You can add copper, SFP fiber, 10 GbE, or 40 GbE modules as your network grows, which is usually cheaper than replacing the appliance.

Yes. Firewalls.com is a Sophos Platinum Partner, the top Sophos partner tier, so you get authentic hardware, valid licensing registered to your account, and support from reps who work with these appliances every day. We can also configure and deploy the 8500 for you through our professional services team.