It is licensed by CPU core count, not by a hardware model. You buy a base license sized to the number of cores your VM will use, then add a protection bundle and a support term. Since Sophos removed RAM limits on virtual, software, and cloud licenses in 2025, this 1 core license runs with unlimited RAM, so you size on cores alone.

One core is the entry point, and it suits small offices, lab and test builds, and lightweight branch deployments. Virtual firewall performance scales with the cores and host resources you assign it, so heavier traffic, TLS inspection, or more concurrent users are reasons to move up to a 2, 4, or 6 core license. If you are unsure, tell us your throughput and user count and a Sophos-certified rep will size it for you.

You can run it on VMware, Microsoft Hyper-V, KVM, and Citrix, deploy it in Microsoft Azure or AWS with pay-as-you-go or bring-your-own-license pricing, or run it on Nutanix AHV. You can also install the same Sophos Firewall software on your own Intel x86 hardware if you would rather use a physical server.

This is a software and license product, so there is no box to ship. You download the Sophos Firewall installer, spin it up on your hypervisor or cloud, and apply the license we send you. Note that Sophos license and renewal products can only be activated in the United States.

The base license covers the firewall, networking, and unlimited remote access and site-to-site VPN. Most buyers add Xstream Protection for the TLS and DPI engine, IPS, ATP, and Security Heartbeat, while Standard Protection covers the essentials for lighter needs. Add an Enhanced or Enhanced Plus support term for 24/7 support and feature updates.

Yes. Sophos offers a free 30-day trial of the firewall software, and you can download the ISO to evaluate the interface on your own hardware or in a VM. When you are ready to buy, the paid license transfers onto your trial serial number so you keep the configuration you have already built.