SOPHOS MAINTENANCE · HARDWARE LAYER FOR FIREWALLS, ACCESS POINTS, SWITCHES
Sophos Maintenance — hardware service for XGS, XG and SG firewalls, access points and switches
We service the hardware layer of Sophos appliances vendor-independently: current-generation XGS firewalls, XG and SG fleets after hardware support ends, APX and AP6 access points, Sophos switches and SD-RED devices. Replacement unit or spare part with SLAs from Parts Only to 24×7×4, configuration restore from backup. Important for your planning: firewall licences, signatures, Sophos Central and threat protection remain manufacturer software services — we keep the devices running on which that software operates. Scope: our core business is hardware break-fix. You transfer Sophos licences to the replacement unit in your own Sophos Central account; for XG and SG the Sophos base licence ends with the manufacturer's hardware end-of-life, after which the appliance works only as a router.
3
Product categories
10+
Product lines
3
Detail pages
30–60 %
Savings vs. Sophos Hardware-Garantieverlängerung
Short answer
TechCare Solutions provides vendor-independent Sophos maintenance for 10+ product lines, including XGS Desktop (1. und 2. Generation), XGS 1U Rack · Mittelstand, XGS 2U Rack · Enterprise und Rechenzentrum, XG Serie (EOSL): SLAs up to 24×7×4, original spare parts from our DACH depot and 30–60 % below Sophos Hardware-Garantieverlängerung, including after end of service life (EOSL). One contract covers Sophos together with 31 other manufacturers, with a fixed-price quote within 48 hours.
Multi-vendor maintenance contract · Third-party maintenance providers
What we cover in Sophos hardware
3 categories · 10 product lines · 4 with EOSL · 10 detail pages
XG and SG firewalls · fleets after hardware support end
3 lines EOSL · 3Access points · switches
4 lines EOSL · 1| Category | Product line | Models | EOSL |
|---|---|---|---|
| XGS firewalls · current generation | XGS Desktop (1. und 2. Generation) | XGS 87 · 88 · 107 · 108 · 116 · 118 · 126 · 128 · 136 · 138 · XGS 87w/107w/116w/126w/136w | no |
| XGS firewalls · current generation | XGS 1U Rack · Mittelstand | XGS 2100 · 2300 · 3100 · 3300 · XGS 2300 2. Gen | no |
| XGS firewalls · current generation | XGS 2U Rack · Enterprise und Rechenzentrum | XGS 4300 · 4500 · 5500 · 6500 · 7500 · 8500 | no |
| XG and SG firewalls · fleets after hardware support end | XG Serie (EOSL) | XG 85 · 86 · 105 · 106 · 115 · 125 · 135 · 210 · 230 · 310 · 330 · 430 · 450 · 550 · 650 · 750 (Rev. 1–3) | yes |
| XG and SG firewalls · fleets after hardware support end | SG Serie · UTM (EOSL) | SG 105 · 115 · 125 · 135 · 210 · 230 · 310 · 330 · 430 · 450 · 550 · 650 | yes |
| XG and SG firewalls · fleets after hardware support end | Sophos RED / SD-RED | RED 15 · RED 20 · RED 50 · RED 60 · SD-RED 20 · SD-RED 60 | yes |
| Access points · switches | AP6 · Wi-Fi 6 (aktuell) | AP6 420 · AP6 420E · AP6 420X · AP6 840 · AP6 840E | no |
| Access points · switches | APX · Wi-Fi 5 (Bestand) | APX 120 · APX 320 · APX 320X · APX 530 · APX 740 | no |
| Access points · switches | AP Serie (älter, EOSL) | AP 15 · AP 15C · AP 55 · AP 55C · AP 100 · AP 100C · AP 100X | yes |
| Access points · switches | Sophos Switch · CS-Serie | CS101-8 · CS101-8FP · CS110-8FP · CS110-24 · CS110-24FP · CS110-48 · CS110-48FP · CS210-8FP · CS210-24FP · CS210-48FP | no |
Detail pages for key product lines
These product lines have their own maintenance detail page with model overview, EOSL table and FAQ. All other lines are also covered — see portfolio below.
Sophos
XGS Desktop (1. und 2. Generation) + 2more lines
XGS 87 · 88 · 107 · 108 · 116 · 118 · 126 · 128 · 136 · 138 · XGS 87w/107w/116w/126w/136w · XGS 1U Rack · Mittelstand · XGS 2U Rack · Enterprise und Rechenzentrum
Detail page & FAQ Sophos
XG Serie (EOSL) + 2more lines
XG 85 · 86 · 105 · 106 · 115 · 125 · 135 · 210 · 230 · 310 · 330 · 430 · 450 · 550 · 650 · 750 (Rev. 1–3) · SG Serie · UTM (EOSL) · Sophos RED / SD-RED
Detail page & FAQ Sophos
AP6 · Wi-Fi 6 (aktuell) + 3more lines
AP6 420 · AP6 420E · AP6 420X · AP6 840 · AP6 840E · APX · Wi-Fi 5 (Bestand) · AP Serie (älter, EOSL) · Sophos Switch · CS-Serie
Detail page & FAQ Sophos product portfolio at a glance
We service all product lines — including older generations long past end-of-service-life. Every line with OEM original parts, German-speaking service and SLA up to 24×7×4.
XGS firewalls · current generation
XGS Desktop (1. und 2. Generation)
DetailsXGS 87 · 88 · 107 · 108 · 116 · 118 · 126 · 128 · 136 · 138 · XGS 87w/107w/116w/126w/136w
Desktop appliances for branches and small sites, frequently in HA pairs at branch locations.
XGS 1U Rack · Mittelstand
DetailsXGS 2100 · 2300 · 3100 · 3300 · XGS 2300 2. Gen
1U rack firewalls for mid-market and headquarters; the standard perimeter in DACH companies.
XGS 2U Rack · Enterprise und Rechenzentrum
DetailsXGS 4300 · 4500 · 5500 · 6500 · 7500 · 8500
Enterprise appliances with redundant power supplies and Flexi-Port modules for data centre and campus.
XG and SG firewalls · fleets after hardware support end
XG Serie (EOSL)
DetailsXG 85 · 86 · 105 · 106 · 115 · 125 · 135 · 210 · 230 · 310 · 330 · 430 · 450 · 550 · 650 · 750 (Rev. 1–3)
Predecessor generation of the XGS series; hardware support ended at the manufacturer, many units still run in production.
SG Serie · UTM (EOSL)
DetailsSG 105 · 115 · 125 · 135 · 210 · 230 · 310 · 330 · 430 · 450 · 550 · 650
SG appliances running Sophos UTM 9; replacement from our pool while the UTM software is still operated.
Sophos RED / SD-RED
DetailsRED 15 · RED 20 · RED 50 · RED 60 · SD-RED 20 · SD-RED 60
Remote Ethernet devices for branches without a local firewall; replacement instead of repair.
Access points · switches
AP6 · Wi-Fi 6 (aktuell)
DetailsAP6 420 · AP6 420E · AP6 420X · AP6 840 · AP6 840E
Current Wi-Fi 6 access points, managed via Sophos Central.
APX · Wi-Fi 5 (Bestand)
DetailsAPX 120 · APX 320 · APX 320X · APX 530 · APX 740
Previous generation with large fleets in office and retail.
AP Serie (älter, EOSL)
DetailsAP 15 · AP 15C · AP 55 · AP 55C · AP 100 · AP 100C · AP 100X
Older access points, manufacturer support ended — replacement from our pool.
Sophos Switch · CS-Serie
DetailsCS101-8 · CS101-8FP · CS110-8FP · CS110-24 · CS110-24FP · CS110-48 · CS110-48FP · CS210-8FP · CS210-24FP · CS210-48FP
Access switches from the Sophos portfolio, usually managed together with firewalls and APs.
Sophos Sophos Hardware-Garantieverlängerung (an Subscription gekoppelt) vs. TechCare TPM
How does TPM compare to the OEM contract?
You save 30–45% per yearSophos Sophos Hardware-Garantieverlängerung (an Subscription gekoppelt) vs. TechCare TPM · example calculation
Sophos Hardware-Garantieverlängerung (an Subscription gekoppelt)
TechCare TPM
Example 40 XGS 2300 in HA pairs at 20 sites with NBD replacement: TechCare roughly 30–45 % below the hardware extension, for XG fleets without manufacturer option up to 70 % below a new purchase.
- EOSL hardware: XG and SG series: replacement from our pool until Sophos hardware EOL — after that the base licence ends; move to XGS planned instead of forced by a defect.
Stays with Sophos
- Firewall licence incl. transfer in Sophos Central, signatures, Xstream Protection
- Hardware base licence (ends with Sophos hardware EOL)
- Firmware releases (SFOS, UTM 9)
Moves to TechCare
- Appliance replacement or spare part per SLA (Parts Only, NBD, 24×7×4)
- Cold spares for HA pairs and critical sites
- Configuration restore from backup, guidance for licence transfer
- One contract for Sophos plus all other manufacturers
Why Sophos maintenance via TechCare instead of Sophos Hardware-Garantieverlängerung
Sophos is one of the most widely deployed firewall vendors in the upper mid-market of the DACH region. The hardware warranty is tied to the subscription; once hardware support for a series ends — as with XG and SG — only a new purchase remains, although the appliance runs flawlessly. That is exactly where we come in.
We service the hardware layer: appliance, power supply, fans, SSD, Flexi-Port modules, replacement unit per SLA and configuration restore from backup. Your Sophos licence — firewall rule set, signatures, Sandstorm, Central management — continues unchanged with the manufacturer. For existing fleets this means you keep the appliance as long as you want and decide the generation change yourself.
1
Contract for all Sophos lines
30–60 %
Savings on current models
bis 70 %
Savings on EOSL models
48 h
Fixed-price quote
When does support for your Sophos models end? Every date is in the independent EOSL database: Sophos EOSL dates on EOSL365.de.
FAQ on Sophos maintenance
Do you service the firewall software or only the hardware?
Only the hardware layer. Firewall licence, signature updates, Sophos Central and threat protection are Sophos software services and continue via your subscription. We make sure the appliance that runs that software stays available — with replacement unit, spare parts and SLA.
Is maintenance worthwhile for XG or SG units whose hardware support has ended?
Yes, until the hardware end-of-life in the Sophos retirement calendar. Until then the Sophos base licence remains valid, and we keep replacement units in our pool and restore the configuration. On the EOL date the base licence on the hardware ends and the appliance no longer filters — we plan the move to XGS with you in good time.
What happens to the Sophos licence when a unit is replaced — and what applies to XG and SG?
Sophos allows licence transfer to an identical or equivalent model in your own Sophos Central account; the old unit is deregistered and then works only as a router. We deliver the replacement unit and guide the step; you or your Sophos partner perform the transfer. For XG and SG, additionally: the Sophos base licence ends with the hardware end-of-life in the Sophos retirement calendar, after which the appliance no longer filters. We therefore keep XG/SG under SLA until that date and plan the change with you. Our core business is hardware break-fix — licence, signatures and firmware stay with Sophos.
Do you also take current XGS appliances into the contract?
Yes. After the manufacturer warranty ends, or in parallel as hardware cover for HA pairs. Model and serial number are all we need for onboarding.
How does replacing a failed firewall work?
Replacement unit per SLA (NBD or 4 hours with cold spare), configuration from your backup. You or your Sophos partner transfer the licence to the new serial number (same or equivalent model) in Sophos Central — we prepare and guide it. The licence remains yours and is not part of our contract.
Can you service Sophos together with Fortinet, Check Point or Palo Alto?
Yes. All four run in one contract with the same hardware-layer logic — one ticket desk, one SLA scheme, one invoice.
How quickly do we get a quote?
48 hours after receipt of your inventory with model, serial number and site.
Service performance
Real actuals Q1 2026 — straight from our ITIL ticketing.
99,2 %
Tickets resolved within agreed response time
2,4 h
Avg. first response on 4h SLA tier
88 %
First-time fix on initial dispatch
97 %
Spare part on site within 4 h, DACH depots
Related topics
Core service
Hardware maintenance in detail
How we set up TPM: contract, SLA tiers up to 24×7×4, engineer pool, spare parts strategy — the service behind the vendor hubs.
View service Compliance
Audit documentation in the contract pack
DORA, NIS2, KRITIS, BAIT, TISAX, ISO 27001 — what the auditor checks, what TechCare delivers automatically with the contract.
View audit topics Practice
Real references
Three templates from European customers 2024–25 — how the migration from OEM to TPM ran in reality.
View cases