SOPHOS XGS MAINTENANCE · HARDWARE LAYER · DESKTOP, 1U, 2U

Sophos XGS Firewall Maintenance — hardware service for XGS 87 to XGS 8500

We service the hardware layer of Sophos XGS firewalls vendor-independently: first- and second-generation desktop models, 1U rack appliances for the mid-market and 2U enterprise models with Flexi-Port modules. Replacement unit per SLA up to 24×7×4, cold spares for HA pairs, configuration restore from backup, guidance for licence transfer. Licence, signatures and Sophos Central stay with the manufacturer. Scope: our core business is hardware break-fix. You transfer Sophos licences to the replacement unit in your own Sophos Central account.

Quote in 48 h Calculate savings

Which Sophos XGS models we service

From the desktop model in the branch to the 2U appliance in the data centre — model and serial number are enough, also for HA pairs.

XGS desktop · 1st generation

XGS 87 · XGS 87w · XGS 107 · XGS 107w · XGS 116 · XGS 116w · XGS 126 · XGS 126w · XGS 136 · XGS 136w

XGS desktop · 2nd generation

XGS 88 · XGS 108 · XGS 118 · XGS 128 · XGS 138 (jeweils auch w-Varianten)

XGS 1U rack · mid-market

XGS 2100 · XGS 2300 · XGS 3100 · XGS 3300 · XGS 2300 2. Gen

XGS 2U rack · enterprise

XGS 4300 · XGS 4500 · XGS 5500 · XGS 6500 · XGS 7500 · XGS 8500

Flexi-Port modules and power supplies

8-Port 1GbE · 2/4-Port 10GbE SFP+ · 2-Port 40GbE QSFP+ · redundante Netzteile für 2U-Modelle

Why TPM for Sophos XGS hardware

The XGS hardware warranty is tied to the subscription and ends with the licence term or the hardware-support end of the series. Many companies renew the licence but not the hardware cover — until a power supply or SSD fails.

We secure the appliance: replacement unit per SLA, cold spare for HA pairs and critical sites, Flexi-Port modules and power supplies, backup restore and guidance for licence transfer. Sophos Central, signatures and SFOS firmware stay with the manufacturer.

30–45 %

Savings vs. manufacturer extension

NBD / 4 h

Replacement per SLA, cold spare optional

48 h

Fixed-price quote after receipt of your inventory

Manufacturer support status of major generations

Once the manufacturer ends hardware support for a generation there is no extension any more — yet the devices often run for years. We close that gap: replacement unit from our pool, same SLA, regardless of age.

Model family	Released	OEM support ends	TPM status
XGS 87 – 136 (1. Gen Desktop)	2021	aktiv	Supported
XGS 2100 – 3300 (1U)	2021	aktiv	Supported
XGS 4300 – 8500 (2U)	2021	aktiv	Supported
XGS 88 – 138 (2. Gen Desktop)	2024	aktiv	Supported

As of 2026. EOSL data based on official vendor roadmaps and subject to change. Binding case-by-case information available on request.

What we deliver

Replacement unit or spare part

Identical or equivalent unit from our pool, power supplies, modules and fans — per SLA up to 24×7×4.

Cold spares per site

For critical sites we keep reserve units on location; the swap takes minutes instead of days.

Configuration restore

Restore from backup or management cloud, guidance for licence transfer to the new serial number.

One contract for all manufacturers

The same inventory covers servers, storage, network and security — one ticket desk, one invoice.

Comparison

TechCare vs. Sophos XGS Firewalls

Concrete SLA tiers, OEM comparison, coverage details and source footnotes — on a print-friendly page.

Open Battle-Card

FAQ on Sophos XGS maintenance

Do you service the firewall software or only the hardware?

Only the hardware layer. Firewall licence, Xstream protection, signatures and Sophos Central continue via your subscription with the manufacturer. We make sure the appliance stays available.

What happens to the Sophos licence when a unit is replaced — and what applies to XG and SG?

Sophos allows licence transfer to an identical or equivalent model in your own Sophos Central account; the old unit is deregistered and then works only as a router. We deliver the replacement unit and guide the step; you or your Sophos partner perform the transfer. For XG and SG, additionally: the Sophos base licence ends with the hardware end-of-life in the Sophos retirement calendar, after which the appliance no longer filters. We therefore keep XG/SG under SLA until that date and plan the change with you. Our core business is hardware break-fix — licence, signatures and firmware stay with Sophos.

Do you also take current devices into the contract, not only old ones?

Yes. Model designation and serial number are all we need, regardless of age. We take current generations after the manufacturer warranty ends or in parallel as hardware cover.

How is the licence transferred to the replacement unit?

Via your Sophos Central or licensing portal to the new serial number; we prepare and guide the step. The licence remains yours.

Which SLA tiers do you offer?

Parts Only, 5×9 NBD and 24×7×4 — selectable per device and site. For 4-hour commitments we keep cold spares at the site.

How quickly do we get a quote?

48 hours after receipt of your inventory with model, serial number and site.

Service performance

Real actuals Q1 2026 — straight from our ITIL ticketing.

99,2 %

Tickets resolved within agreed response time

2,4 h

Avg. first response on 4h SLA tier

88 %

First-time fix on initial dispatch

97 %

Spare part on site within 4 h, DACH depots