+49 6430 9227117
Book consultation
SOPHOS XG / SG MAINTENANCE · AFTER HARDWARE SUPPORT END · HARDWARE LAYER

Sophos XG and SG Firewall Maintenance — replacement for existing units after hardware support end

We keep Sophos XG and SG appliances under SLA whose hardware support at the manufacturer is running out: XG 85 to XG 750 of all revisions, SG 105 to SG 650 with UTM 9 and RED and SD-RED devices. Replacement unit from our pool per SLA, configuration restore from backup, guidance for licence transfer — until the hardware end-of-life set by Sophos. Scope: our core business is hardware break-fix. On the EOL date the Sophos base licence on the hardware ends and the appliance then works only as a router; we plan the move to XGS with you in good time.

Which XG and SG models we service

Until hardware EOL in the Sophos retirement calendar we keep replacement units in our pool. After that the base licence ends — we tell you per model in good time when that is.

XG desktop · rev. 1–3
XG 85 · XG 85w · XG 86 · XG 86w · XG 105 · XG 105w · XG 106 · XG 106w · XG 115 · XG 115w · XG 125 · XG 125w · XG 135 · XG 135w
XG 1U / 2U rack
XG 210 · XG 230 · XG 310 · XG 330 · XG 430 · XG 450 · XG 550 · XG 650 · XG 750
SG desktop · UTM 9
SG 105 · SG 105w · SG 115 · SG 115w · SG 125 · SG 125w · SG 135 · SG 135w
SG 1U / 2U rack · UTM 9
SG 210 · SG 230 · SG 310 · SG 330 · SG 430 · SG 450 · SG 550 · SG 650
RED / SD-RED · remote Ethernet devices
RED 10 · RED 15 · RED 15w · RED 20 · RED 50 · RED 60 · SD-RED 20 · SD-RED 60

Why TPM for XG and SG fleets

Sophos has ended hardware support for the XG series and the SG series; licences can partly still be renewed, but the manufacturer no longer supplies replacement units. Anyone who wants to keep the appliance — because rule set, integrations and staff are established — carries the outage risk alone.

We bridge this phase: replacement unit from our pool per SLA, power supplies and SSDs, configuration restore from backup and guidance for licence transfer, until hardware EOL. You gain time for a planned generation change to XGS — instead of having it forced by a hardware defect.

until EOL
Replacement from our pool until Sophos hardware EOL
NBD / 4 h
Replacement from our pool per SLA
48 h
Fixed-price quote after receipt of your inventory

Manufacturer support status of major generations

Once the manufacturer ends hardware support for a generation there is no extension any more — yet the devices often run for years. We close that gap: replacement unit from our pool, same SLA, regardless of age.

Model family Released OEM support ends TPM status
SG-Serie (UTM 9) 2014 beendet Recommended
XG-Serie Rev. 1 / 2 2015 beendet Recommended
XG-Serie Rev. 3 2018 beendet Recommended
RED 15 / 50 2013 beendet Recommended
SD-RED 20 / 60 2019 aktiv Supported

As of 2026. EOSL data based on official vendor roadmaps and subject to change. Binding case-by-case information available on request.

What we deliver

Replacement unit or spare part

Identical or equivalent unit from our pool, power supplies, modules and fans — per SLA up to 24×7×4.

Cold spares per site

For critical sites we keep reserve units on location; the swap takes minutes instead of days.

Configuration restore

Restore from backup or management cloud, guidance for licence transfer to the new serial number.

One contract for all manufacturers

The same inventory covers servers, storage, network and security — one ticket desk, one invoice.

FAQ on XG / SG maintenance

Is it worthwhile when the series is discontinued at the manufacturer?
Yes, until the hardware end-of-life set by Sophos. Until then the base licence applies, and the contract costs a fraction of a new purchase. On the EOL date the base licence on the hardware ends — the appliance no longer filters, so we plan the move to XGS with you beforehand.
What happens to the Sophos licence when a unit is replaced — and what applies to XG and SG?
Sophos allows licence transfer to an identical or equivalent model in your own Sophos Central account; the old unit is deregistered and then works only as a router. We deliver the replacement unit and guide the step; you or your Sophos partner perform the transfer. For XG and SG, additionally: the Sophos base licence ends with the hardware end-of-life in the Sophos retirement calendar, after which the appliance no longer filters. We therefore keep XG/SG under SLA until that date and plan the change with you. Our core business is hardware break-fix — licence, signatures and firmware stay with Sophos.
Where do the replacement units come from?
From our tested pool and via our sourcing partners. Every replacement unit is tested before delivery and brought to the matching firmware level.
How long will you keep XG and SG under SLA?
Until the hardware EOL date of each model in the Sophos retirement calendar, as long as replacement units can be sourced. After that the Sophos base licence on the hardware ends; operation as a firewall is then no longer possible.
Which SLA tiers do you offer?
Parts Only, 5×9 NBD and 24×7×4 — selectable per device and site. For 4-hour commitments we keep cold spares at the site.
How quickly do we get a quote?
48 hours after receipt of your inventory with model, serial number and site.
Service performance

Real actuals Q1 2026 — straight from our ITIL ticketing.

99,2 %
Tickets resolved within agreed response time
2,4 h
Avg. first response on 4h SLA tier
88 %
First-time fix on initial dispatch
97 %
Spare part on site within 4 h, DACH depots
More from Sophos

Other Sophos models and service