Sophos Virtual Firewall Unlimited Cores.
Enterprise scale without the hardware.
Run the full Sophos Firewall feature set as a virtual appliance on your own hypervisor or in the cloud,
with nothing to rack and no ceiling on scale. The Unlimited Cores license lets you assign as many vCPUs and
as much RAM as your host can spare, so you size for the traffic you actually push.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Instant License DeliveryCodes emailed once processed.
Specifications
Virtual Firewall Unlimited Cores at a Glance
Deployment
Hypervisors: VMware ESXi, Microsoft Hyper-V, KVM, and
Citrix. Cloud (BYOL): Amazon Web Services and Microsoft
Azure. Bare metal: install as a software appliance on your own Intel-based server.
Licensing
A perpetual base license covers core firewall, IPSec and SSL VPN, wireless, and Sophos
Central management. Licensing is counted by vCPU cores, not per user. Since March 2025 there is no RAM
cap on virtual, software, and cloud BYOL licenses, so this Unlimited Cores tier uses all the RAM you
assign.
Protection
Standard Protection: Network Protection (IPS and ATP), Web Protection, and Enhanced
Support. Xstream Protection: everything in Standard plus Zero-Day Protection
sandboxing, TLS 1.3 inspection, DNS Protection, and Central Orchestration for SD-WAN.
Performance & Sizing
Throughput on a virtual appliance depends on the host you give it, so we don't quote fixed numbers.
Assign enough vCPU, RAM, and NIC bandwidth for your traffic, then scale up later without swapping
hardware. Need a hand sizing it? Talk to a Sophos-certified rep.
Not sure which core tier you need?
Compare every Sophos Virtual Firewall license side by side, from a single core for a branch office up to
unlimited cores for the data center.
The base license plus Standard Protection covers the essentials: firewall, IPS, ATP,
Web Protection, application control, VPN, and Enhanced Support. Xstream Protection adds the advanced
layer on top, including Zero-Day Protection sandboxing, full TLS 1.3 inspection, DNS Protection, and
Central Orchestration for SD-WAN. If you plan to inspect encrypted traffic or want zero-day defense,
go Xstream. For straightforward perimeter security on a tighter budget, Standard does the job.
It runs on all the major hypervisors: VMware ESXi, Microsoft Hyper-V, KVM, and
Citrix. For public cloud you can bring your own license to Amazon Web Services and Microsoft Azure.
You can also install it as a software appliance on your own Intel-based server. Whichever route you
pick, you manage it through Sophos Central alongside your other Sophos devices.
It comes down to the traffic and features you plan to run. The Unlimited Cores
license lets you assign as many vCPUs and as much RAM as your host allows, so you are not boxed in.
Since March 2025, Sophos removed RAM caps from all virtual, software, and cloud licenses, so this tier
uses the full memory you allocate. Want a recommendation for your user count and workload? Talk to a
Sophos-certified rep and we will size it with you.
The perpetual base license keeps the appliance running with core firewall, VPN,
wireless, and Sophos Central management, but you will want at least Enhanced Support to receive
firmware updates. To turn on IPS, web filtering, sandboxing, and the rest, you add a Standard or
Xstream Protection subscription. Licensing is per appliance, not per user.
Yes. The base license includes unlimited IPSec and SSL site-to-site VPN plus
remote-access VPN, so you can connect branch offices and remote workers without buying separate VPN
user licenses. SD-WAN and SD-RED site-to-site connectivity are included as well.
Yes. Firewalls.com is a Sophos Platinum Partner, so you get factory-fresh licensing,
certified pre-sales advice, and support from a team that works with Sophos Firewall every day. Not
sure which core tier or protection bundle fits? Talk to a Sophos-certified expert before you buy.
Bring Sophos Firewall to your virtual stack
Deploy the Unlimited Cores license on your hypervisor or in the cloud, then let us help you pick the
right protection bundle and support level. Firewalls.com is a Sophos Platinum Partner, here to help you
get it right the first time.
