Sophos AP6 840E.
The flagship access point for your busiest spaces.
The AP6 840E is the top of the Sophos AP6 lineup, built for packed offices, classrooms, and event spaces
where a lot of people need fast, reliable Wi-Fi at once. Manage it in Sophos Central alongside the rest of your Sophos security, with no separate console to run.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
AP6 840E at a Glance
Wi-Fi 6/6E Performance
Tri-radio operation across the 2.4, 5, and less-congested 6 GHz band (where available), with
4x4:4 MIMO for maximum throughput in high-density spaces. WPA3 security is built in,
and DFS is supported.
Wiring & Power
Two 2.5GbE interfaces keep the LAN from becoming the bottleneck. The 840E is the only
AP6 model that needs 802.3bt PoE++ (up to 45W) to run all three radios at once. Power
it with the Sophos CS210-8FP or CS1010-8FP switch, or the Sophos PoE++ 60W injector.
Deployment
Built for indoor use with desktop, wall, or ceiling mounting. Plenum-rated (UL2043),
so it's approved for the air-handling space above drop ceilings. Measures 8.86 x 8.86 x 1.54 in and
weighs 1.2 kg.
Management & Warranty
Managed entirely in Sophos Central, with a local web interface available for a single
AP. Backed by a limited lifetime hardware warranty; an active support subscription adds
Central management, firmware updates, Advanced RMA, and 24/7 support.
Not sure the 840E is the right AP6?
See how the AP6 840E stacks up against the rest of the AP6 Series, from the compact 420 to the IP67-rated
outdoor 420X, and find the right fit for every space.
No. The 840E ships as the access point only. It needs 802.3bt PoE++ to power all
three radios, which is more than a standard PoE+ port delivers. Power it with a Sophos PoE++ switch
like the CS210-8FP or CS1010-8FP, or the Sophos PoE++ 60W injector. If you're running several access
points across ceilings and walls, a PoE switch is usually cleaner than one injector per AP.
Both share the same 4x4:4 performance and 2.5GbE connectivity. The E adds a third
radio for the 6 GHz band, which is Wi-Fi 6E. If you have newer client devices and want the
least-congested spectrum for high-density areas, the 840E is the one to get. The 6 GHz band is not
enabled in every country, so it's worth confirming availability for your region.
No. AP6 Series access points are managed through Sophos Central, not through a Sophos
firewall, so you do not need an XGS firewall to run them. If you already own Sophos Firewall you get
tighter integration and faster automated threat response, but it is not required.
The hardware carries a limited lifetime warranty. A support and services
subscription, one per access point, is what unlocks Sophos Central management, firmware updates,
Advanced RMA, and 24/7 multi-channel support. Features delivered through Sophos Central need an active
subscription, so for cloud-managed deployments you will want it in place.
As the top model in the AP6 line, the 840E is built for high-density spaces: busy
offices, classrooms, and event areas with lots of clients connecting at once. Real-world capacity
depends on your layout, client mix, and how the network is designed, so for a room-by-room plan our
team can help size the number of access points you will need.
Yes. It's plenum-rated (UL2043), so it's approved for installation in the
air-handling space above drop ceilings, along with standard desktop, wall, and ceiling mounting. It is
an indoor access point; for outdoor coverage, look at the IP67-rated AP6 420X instead.
Ready to roll out Sophos Wi-Fi?
Firewalls.com is a Sophos Platinum Partner, so you get certified pre-sales advice, straight answers on
licensing and power, and help sizing your deployment. Tell us about your space and we'll put together a
quote for the access points, switches, and support you actually need.
