UPDATE: Information in this blog post is no longer up to date. Please see the latest information here:
https://partnernews.sophos.com/en-us/2021/02/products/updated-xg-firewall-v18-which-hardware-models-are-supported/

I'm looking at possibly rolling out a Sophos UTM for a customer, but I can't seem to find any reviews on them (especially the AP50). I know Ubiquiti is coming out with their new line here shortly and always hear good things about them, but not having phone support when needed is a downer, plus the Sophos AP's integrate right into the UTM, but do require a yearly license. Sophos Advisory: Customers are not able to access any Central Dashboards due to ongoing Microsoft Azure outage. March 15 Sophos Advisory: Central and Enterprise Dashboard - Some customers are unable to add or edit the 'Custom Rules' section within the Federation Login global setting.

—

With the launch of XG Firewall v18 growing ever nearer, many of your customers will be planning for their software upgrade ahead of time, or maybe even considering a migration to XG from another firewall platform.

Scope of Supply: Sophos AP10 Scope of Supply: Sophos AP30 Scope of Supply: Sophos AP50 Mount the Access Points according to their intended use and update the UTM appliance. All access points can be put on a stable horizontal surface or can be mounted on the wall. The Sophos AP30 can also be. Sophos AP50 Mounting Instructions. Power-Over-Ethernet Injector (Optionally Included with AP50) 15. Installing the Poe Injector. Technical Specifications. Sophos AP30 Operating Instructions Manual (18 pages) Access Points. Migration Assistance. Sophos offers professional services to assist with the migration to a successor product. For details on how Sophos Professional Services can assist with a successful migration, visit the Professional Services web page.You can also contact your local Sophos Sales Partner to discuss additional options. Sophos strongly recommends following industry-standard migration best.

We will detail here which hardware models can upgrade to XG v18 and where a hardware refresh would be necessary to support an upgrade.

The good news is that all current and previous XG and SG Series hardware models with at least 4 GB of RAM can upgrade – a valid license is also necessary, of course. The XG 86 and 106 models were previously introduced specifically to address this requirement.

Restrictions for Previous Revisions

Any model with less than 4 GB cannot upgrade to v18.

XG v18 and Beyond Hardware Support Policy

This graphic provides an overview of the planned support policy.

• Any model which is not supported in v18 will continue to be supported on v17.5
• Any model which is only supported up to v18, e.g. older XG/SG revisions, can remain on v18 and will continue to receive support in line with our overall support policy

A complete overview of all models can be found at the bottom of this post.

Note: *Models with less than 4 GB are not supported in v18.

Determining the Revision Number of an Appliance

Customers may not know which revision they’re currently on.

• The revision number appears on the silver label which can usually be found on the underside of the appliance (near the manufacture date) but that may not be accessible if the hardware is mounted in a rack.
• You can also determine the revision number from the serial number. This is explained in this Knowledge Base article: https://community.sophos.com/kb/en-us/118143

Model by Model Overview of XG v18 Support

The following tables show a model by model view of the XG/SFOS hardware support policy for both current and previous XG and SG Series hardware.

* Model has less than 4 GB RAM Hercules laptops & desktops driver.

A new firmware is now available for all RED 50 Remote Ethernet Device customers to install. It includes a fix for the ongoing issue which prevented some devices from booting or caused them to become inoperable.

Please assist and advise any customer who has RED 50 devices deployed to ensure that they install this update immediately.

The following information will be sent to all RED 50 customers in the coming days:

An issue on RED 50 Remote Ethernet Devices has led to an increased failure rate, with some units no longer able to boot or becoming inoperable. All RED 50 devices are at risk for this failure.

Sophos Ap50 Datasheet

A new firmware version resolving this issue is now available for you to install.

We strongly advise all RED 50 customers to apply this update as soon as possible.

If you are a Sophos SG UTM customer:

• Install the UTM 9.7 Maintenance Release 2 (9.702), which includes the RED firmware update. This update will require a reboot.

Although we would always recommend that you run the latest software version, if you are not able to upgrade to UTM 9.7 at this time, please reach out to Sophos Support for assistance in applying the new RED firmware on your existing software version.

Sophos Ap50 Setup

Update from March 9, 2020: UTM 9.606 has now been released which also includes the updated firmware.

Sophos Ap50 Specs

If you are a Sophos XG Firewall customer:

• The RED firmware pattern update 2.0.019 contains the remedy and is available for you to install. Applying this update will not require a reboot of your firewall but all connected RED devices will be rebooted.

Further instructions and information are available in this Knowledge Base article:
https://community.sophos.com/kb/en-us/135240

If you have a customer whose device has already failed, please assist them in opening an RMA case with Sophos Support.

Should you have any further questions, please reach out to your local Sophos contact.

Thank you for your patience in this matter.

Please note: Many of the links above require access to the Sophos Partner Portal, which is available only to Sophos Partners. If you are a registered partner and have trouble logging in, please contactcustomercare@sophos.com.

Sophos Ap50 Reset

Wordpress design. In some cases, if you are not logged in, the direct links given may not work. If so, verify you are logged in to the Partner Portal and then click the link again to view the desired page.