Sophos AP6 420.
Cloud-managed Wi-Fi 6 for the everyday office.
The AP6 420 is Sophos' entry point into cloud-managed Wi-Fi 6. It's an indoor, dual-band access point built
for retail floors, clinics, classrooms, and small-to-midsize offices that want faster, more secure Wi-Fi
without standing up a hardware controller. Plug it in, register it, and
connect.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
AP6 420 at a Glance
Wi-Fi 6 Performance
Dual-radio 802.11ax on the 2.4 and 5 GHz bands with a 2x2:2 MU-MIMO
design. Wi-Fi 6 brings better airtime efficiency and battery-friendly TWT scheduling, so a room full of
laptops, phones, and IoT devices behaves in high-density spaces.
Connectivity
One 1GbE port with PoE+ (802.3at) for both power and data over a
single cable. The 420 is the value model in the AP6 lineup; step up to the 840 or any "E" model if you
need a 2.5G uplink.
Deployment
Indoor, with desktop, wall, or ceiling mounting. Internal omnidirectional antennas and
a low-profile housing suit offices, retail, clinics, and classrooms. Plenum and mount kits are available
separately.
Management & Warranty
Managed exclusively in Sophos Central, with a local web UI for single-AP setup. Backed
by a limited lifetime warranty; a Sophos Central support subscription per AP unlocks
firmware updates, 24/7 support, and Advanced RMA.
Not sure the 420 is the right fit?
The AP6 Series runs from the indoor 420 up to the tri-radio 840E and the outdoor, IP67-rated 420X. If you
need Wi-Fi 6E and the 6 GHz band, or a 2.5G uplink for a busier network, it's worth a side-by-side look
before you buy.
No. The AP6 Series is managed exclusively through Sophos Central, the cloud platform,
and cannot be run from an XGS firewall. If you specifically want firewall-controlled Wi-Fi, that was
the older APX Series, which is now end-of-sale. For new deployments, Central is the path forward, and
it lets you manage your Wi-Fi next to your firewalls, switches, and endpoints on one screen.
To manage the AP6 420 in Sophos Central you need a support and services subscription
per access point. That subscription is what unlocks Central management, firmware updates, 24/7
support, and Advanced RMA. You can run a single AP from the built-in local web interface without
Central, but you lose the cloud dashboard, cross-product features, and remote management, so most
business deployments pair the hardware with a Central subscription. Not sure which term to buy? Talk
to a Sophos-certified expert here.
The plain SKU ships without a power adapter or PoE injector, which is what "no power
adapter / PoE injector" in the product name means. The AP6 420 draws PoE+ (802.3at), so you power it
from any PoE+ switch port or a PoE+ injector. For a single AP, an injector is usually the simplest
option; for several APs, a Sophos PoE+ switch keeps power and management on one console. If you're not
sure what you already have, ask us and we'll spec the right power option.
The 420 is a dual-band Wi-Fi 6 access point covering the 2.4 and 5 GHz bands with a
1GbE PoE+ uplink. The 420E adds a third radio for Wi-Fi 6E and the 6 GHz band, plus a 2.5G interface
for more headroom on the wire. If your client devices support Wi-Fi 6E and you want the
least-congested band, choose the 420E. If you need solid, affordable Wi-Fi 6 for a typical office, the
420 is the better value. Note the 6 GHz band isn't available in every region.
Real-world coverage depends on your building materials, layout, and how many devices
connect at once, so there's no single square-footage number that fits every site. As a rough planning
guide, one AP6 420 comfortably serves a typical open office area or a few adjacent rooms with dozens
of everyday devices. For larger or high-density spaces, you add more access points rather than pushing
one harder, and because they're managed in Sophos Central, scaling out is just registering another AP.
Tell us your space and headcount and we'll help you plan the right number.
No on both counts, and that's by design for the value model. The 420 is Wi-Fi 6 on
the 2.4 and 5 GHz bands, and it's the one AP6 model without a 2.5G port, so its uplink is 1GbE. If you
want Wi-Fi 6E on the 6 GHz band, look at an "E" model like the 420E or 840E. If you want a 2.5G uplink
to avoid a wired bottleneck, step up to the 840 or an "E" model. For a standard office network, the
420's 1GbE PoE+ uplink is plenty.
Need help sizing a Sophos deployment?
Our team is ready to help you choose the right model and licensing tier for your network size and budget.
Reach out directly and we'll get you a quote fast, then handle license delivery from order to
activation.
Login and Registration Form
Existing User