Both bundles start with the same base license, Network Protection, and Web Protection, so you get firewall, IPS, deep packet inspection, and web filtering either way. Xstream Protection adds Zero-Day Protection with cloud sandboxing plus Central Orchestration for SD-WAN, which is what most teams want if they inspect a lot of encrypted traffic or manage more than one site. If you only need core firewall and web security, Standard Protection covers it. Not sure which fits? Talk to a Sophos-certified rep and we will size it with you.

Yes. Every XGS 3100 includes a free base license for core firewalling, but on its own the appliance ships with only 90 days of vendor support and a limited set of firmware updates. To keep getting firmware, threat intelligence, and full support, add a Standard or Xstream Protection bundle, or a separate Enhanced Support license. Most buyers pair the hardware with a bundle so the box stays current and covered.

The XGS 3100 is built for medium-sized businesses and distributed enterprises, and Sophos rates it for roughly 500 to 750 users depending on your traffic mix. It delivers up to 47 Gbps of firewall throughput and about 2.47 Gbps of VPN throughput, so it has headroom for busy sites running multi-gig internet and heavy remote access.

Out of the box you get 8 GE copper ports, 2 SFP fiber ports, and 2 SFP+ 10GbE fiber ports, plus a Flexi Port expansion bay. That bay lets you add copper, fiber, PoE, or bypass modules down the road instead of replacing the appliance, and like every XGS 1U model it supports an optional second power supply for redundancy.

Renewals come in 1, 3, and 5 year terms and match your existing bundle, whether that is Standard or Xstream Protection. Send us your appliance serial number and we will pull the right renewal SKU and pricing. Renew before your current term ends, since some licenses cannot be installed once coverage has lapsed past the end-of-support date.

Yes. If you would rather not stand it up yourself, our certified engineers offer configuration and managed services, from a one-time setup to fully managed ongoing support. We can handle initial config, firmware, and policy tuning so the appliance is secured the way you need before it goes live. Ask about Premium Configuration and Setup when you request a quote.