When your coverage has to reach past the walls, the AP6 420X is the Sophos access point made for it. It is
sealed against dust and water, mounts to a pole or an exterior wall, and delivers Wi-Fi 6 to parking lots,
courtyards, warehouses, and campus grounds. You manage it from Sophos Central right alongside your firewalls and switches.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
AP6 420X at a Glance
Built for outside
An IP67-rated enclosure keeps out dust and water, so the 420X holds up to rain, heat,
and cold. It mounts to a pole or exterior wall and ships with external omnidirectional
antennas.
Wi-Fi 6 performance
802.11ax across the 2.4 and 5 GHz bands with a 2x2:2 radio design and
WPA3 security. Good coverage for open outdoor areas and busy, device-heavy spaces alike.
Power & uplink
A single 2.5G interface with PoE+ (802.3at) carries data and power over one cable.
Note the plain SKU ships hardware only, so plan a PoE+ injector or switch to power it.
Managed in Sophos Central
Register the AP and run it from the same cloud console as your Sophos firewalls and switches. A
per-AP support subscription unlocks Central management, firmware, and 24/7 support.
Not sure the 420X is the right AP6?
The outdoor 420X is one of five AP6 models. If you are covering indoor offices, high-density rooms, or
want the 6 GHz band, another model may fit better. Line them up side by side.
Real-world coverage depends on the site, walls, and interference, so there is no
single number that fits every install. For open outdoor spaces one 420X covers a good stretch, and you
can shape or extend that reach with the optional 120-degree sector or 30-degree directional antennas.
For larger areas, plan on adding units. Tell us your layout and device count and we will help you size
the deployment.
No. The plain version is hardware only, with no power adapter or PoE injector in the
box. The 420X draws power over its 2.5G PoE+ port (802.3at), so you power it with a PoE+ injector or a
PoE+ switch. If you are running several access points, a Sophos PoE switch is the tidier option and it
manages from the same console. Add the injector or switch to your order and we will make sure it
matches.
To manage the 420X in Sophos Central you need a support and services subscription for
each AP. That subscription is what unlocks Central management, firmware updates, Advance RMA, and 24/7
support. Sophos ended the older free Central licensing, so budget the support term with the hardware.
Not sure which term to pick? Talk to a Sophos-certified expert and we will sort it out.
No. The AP6 Series is managed through Sophos Central, not from a Sophos firewall.
That is a change from the older APX access points, some of which a Sophos Firewall could control
directly. With the 420X you register the AP in Central and run your Wi-Fi next to your firewalls,
switches, and other Sophos products in one place.
No. The 420X is a Wi-Fi 6 access point on the 2.4 and 5 GHz bands. Only AP6 models
with an E in the name, like the AP6 420E and 840E, add the 6 GHz band for Wi-Fi 6E. For an outdoor
deployment the 420X gives you Wi-Fi 6 performance and WPA3 security in a rugged, weather-sealed build.
The 420X is designed for pole or wall mounting outdoors, and its IP67 rating means it
can sit in exposed spots like parking lots, courtyards, and building exteriors. Optional sector and
directional antennas let you aim coverage where you want it. If you need a specific bracket for your
surface, ask us and we will match the right mounting hardware to your site.
Get outdoor Wi-Fi 6 done right
As a Sophos Platinum Partner, Firewalls.com can spec the AP6 420X, the PoE and mounting hardware, and the
support term for your site, then configure it so it is ready to deploy. Talk to a Sophos-certified expert
and get a quote today.
