Sophos Central Management and Reporting
The ultimate cybersecurity cloud platform delivers easy management and
reporting across all your Sophos Firewalls and other Sophos products.
Stay informed
Sophos Central keeps you completely updated about the state of your network security with convenient, at-a-glance dashboard insights.
- See the status and utilization levels of all your Sophos firewalls
- View active threats and security alerts
- Get SD-WAN VPN and SD-RED device status updates
- Receive alerts about policy violations, risky apps, and suspicious activity


Take control
Sophos Central provides simple, full-featured group firewall management from any location.
Group management
Assign your firewalls to groups to synchronize policies and settings
Backup management
Store your firewall configuration backups in the cloud for safekeeping
Firmware updates and upgrades
Easily apply firmware updates with just a couple of clicks
Task queue
Audit and monitor changes to your network in real time
Zero-touch deployment
Effortlessly deploy new firewalls in remote locations without the need for IT staff on site
SD-WAN VPN orchestration
Set up a multipoint SD-WAN VPN overlay network with just a few clicks
Look deeper
Sophos Central provides deep intelligence into your network activity through analytics, rich built-in reports, and flexible customization tools.
Visualize important data with detailed, predefined reports
Bandwidth usage

Web usage

Threats and events blocked

Firewall

Geo-activity

Antivirus

Intrusion prevention (IPS)

Extend your network
Use Sophos Central to quickly and easily deploy new firewalls, Sophos SD-RED remote Ethernet devices, wireless access points, network switches, zero trust network access (ZTNA), and all your other Sophos products.

- Deploy new Sophos Firewalls to remote sites from Sophos Central without touching them.
- Deploy zero-touch Sophos SD-RED branch office, home office, or ICS auto-provisioning VPN devices with just a few clicks.
- Add new plug-and-play Sophos APX wireless access points effortlessly.
- Provide secure remote access to your important applications and data with Sophos ZTNA.
Extend your protection
Sophos Central is a force multiplier for your team, enabling you to manage your firewall, endpoints, servers, mobile devices, and Sophos products through a single console while taking advantage of Sophos Synchronized Security™ integration.
- Security Heartbeat™, a feature of Sophos Synchronized Security, shares endpoint health status with your firewall in real time
- An automatic response isolates compromised systems to prevent lateral movement of threats and avoid data loss
- Synchronized application control identifies 100% of encrypted and evasive apps
- Synchronized user ID makes it easy to integrate with Active Directory

How to buy
Sophos Central provides extensive cloud management capabilities that are included at no extra charge with all protection bundles. While customers with individual subscriptions are also eligible for many of these features, Enhanced or Enhanced Plus support is required to receive firmware updates and full access to customer support.
Sophos Central features | Included with any protection bundle, support, or individual subscription1 | Xstream Protection Bundle (Sophos Central Orchestration subscription) |
---|---|---|
Central Firewall Management | ||
Firewall group management | ||
Scheduled firmware updates | ||
Backup management | ||
Zero-touch deployment | ||
SD-WAN VPN orchestration | ||
Central Firewall Reporting | ||
Cloud data retention | 7 Days | 30 Days – Up to 1 Year2 |
Individual firewall reports | ||
Multi-firewall reporting | ||
Custom report templates | ||
Scheduled reports | ||
Export reports | ||
XDR/MDR | ||
XDR/MDR connector | ||
ZTNA | ||
Integrated ZTNA Gateway |
1 Excludes the Base License. Customers with a Base License only must add support for access to Sophos Central management and the 7-day allocation of Central Firewall Reporting. Support is also required to receive firmware updates and full access to customer support.
2 The 30 days included in Xstream Protection is calculated based on the average traffic volumes for each firewall appliance size. In higher-than-average traffic environments, the report retention rate may be lower. Add Central Firewall Reporting Advanced to extend the data retention period to up to 1 year.