Sophos Wireless
The smarter way to simple, secure Wi-Fi
Sophos Wireless and our unified cloud management platform
simplify your wireless network management and security, saving
you valuable time and resources.

Sophos Wireless: As easy as 1,2,3Highlights

Your Wi-Fi networks will be up and running in no time with our three-step setup.

Ì Scalable cloud platform forremote management

One platform
With our single-platform approach, your Wi-Fi is always just one click away from yournext Sophos solution. You can manage your Wi-Fi alongside your firewalls and switches,endpoint and server security, email protection, and more.

Ì Local web interface tomanage a single AP

Two ways to manage

Ì Better performance andsecurity with Wi-Fi 6/6Eaccess points

Remotely manage your full Wi-Fi estate in Sophos Central or make individual AP settings
in the local user interface (AP6 Series only).

Ì Active Threat Response forcompromised host isolation

Three steps to connect

Ì Captive portal for guest andvisitor access

Sophos Wireless is easy to set up and deploy. Create a wireless network, register youraccess point, and connect. This simple onboarding process ensures your Wi-Fi networks
are up and running in minutes.

Our pragmatic approach to cybersecurity
Our range of award-winning solutions and services simplifies your security and allows
you to focus on your core business objectives. While your IT peers are switching from one
console to the next in their complex, multi-vendor environments, you can have a single
pane of glass for everything.
Get cross-product integration and features such as Active Threat Response, to enhanceyour security posture.
Our portfolio includes products and solutions for secure access inside and outside of yournetwork. We offer ZTNA to provide granular access to applications, SD-WAN and remote
Ethernet devices to secure your branch office connectivity, Sophos Firewall for theultimate in network security and performance, and switches to power your access points
and offer better network control.
You could use multiple consoles to manage your access and security, but all you need is one.

Ì Centralized management
alongside the entire Sophos
ecosystem of cybersecurity
solutions

Sophos Wireless

Sophos Wi-Fi portfolio overview
As a scalable, cloud-managed solution, with support for the latest generation of Wi-Fi 6/6E access points, Sophos Wireless is
our recommendation for all of your wireless networks. This overview explains all currently available options to set up and secure
Wi-Fi networks.

Sophos WirelessCloud-Managed Wi-Fi
Sophos Wireless is our Sophos Central-managed Wi-Fi solution. It offers the broadest feature set, the best scalability, andexclusive support for the latest generation of Wi-Fi 6/6E access points, the AP6 Series.
As a single management platform for all of your Sophos security solutions, Sophos Central puts your Wi-Fi management
just one click away from your firewalls and switches, endpoint and server security, email protection, and more. Sophos
Central also unlocks additional capabilities, such as Active Threat Response.
The following access points can be managed in Sophos Central:Ì AP6 Series: Wi-Fi 6/6E 802.11ax (all models)Ì APX Series: Wi-Fi 5 802.11ac Wave 2 (all models) – sold as long as stock lasts only. End-of-life date: December 31, 2027

Sophos Firewall

Integrated Wi-Fi models
XGS Series desktop form-factor firewalls are available with integrated Wi-Fi. This option is suitable for smaller deployments,
such as retail stores, where a single device is deployed for network security.
The following XGS Series firewalls have integrated Wi-Fi:
Ì XGS Series: XGS 87w, 107w, 116w, 126w, 136w
The following XGS Series firewalls additionally support the use of an optional Wi-Fi module:Ì XGS Series: XGS 116w, 126w, 136w

Firewall as a controller
Sophos Firewall (XGS Series) can be used as a Wi-Fi controller for our end-of-sale Wi-Fi 5 APX Series access points only.
We have announced an end-of-life date of December 31, 2027 for the APX Series; however, existing customers cancontinue to use APX on a supported platform until that date.
We will continue to sell any remaining APX models for as long as stock lasts. Please check with your local Sophos
representative for further information.
For additional information, see sophos.com/firewall.

Sophos Wireless

Sophos Wireless: Scalable, cloud-managed Wi-Fi
As more and more businesses shift infrastructure and solutions to the cloud, and remote and hybrid working models
accelerate the demand for more flexibility, switching your Wi-Fi management to Sophos Central is not only a way to makebetter use of your resources, but it’s also your path to the latest features and technology for a truly scalable Wi-Fi experience.

Sophos Wireless features
For a full overview of all features available in Sophos Wireless, please check out our website: sophos.com/wireless.

Benefits of Sophos WirelessCloud scalability
While on-premises, controller-based solutions can belimited by hardware resources, with Sophos Wireless,extending your network is as simple as adding anadditional access point.

Remote management via a single platform
Sophos Central provides a single cloud platform toremotely manage your Wi-Fi alongside your firewalls andswitches, endpoint and server security, email protection,
mobile, and much more. A web user interface is alsoavailable to manage an individual AP6 access point.

Better performance and security
With exclusive support for our Wi-Fi 6/6E, AP6 Series
access points, you get a significant performance
improvement, 2.5G connectivity, and support for the latest
WPA3 security standard.

Improved guest access experience
The first thing people do upon entering your premises islook for the Wi-Fi password, and Sophos has you covered.
Give your employees, guests, and visitors a better Wi-Fi
experience with our many authentication options.

Wi-Fi 6/6E (802.11ax)

Click and connect
Whether you’re a wireless pro or an IT all-rounder withlimited Wi-Fi knowledge, our user interface will guide
you through access point registration and network
configuration, so that your users are connected in next tono time.

Improved performance, better security with WPA3, andthe option to use the less-congested 6 GHz band (whereavailable), make Wi-Fi 6/6E the standard of choice,particularly for high-density environments.

Active Threat Response

Isolate compromised hosts at the access layer
API-triggered threat feeds initiate an automatic response to isolate compromised hosts across all Sophos AP6 Series
access points and Sophos switches on the network.
Ì Isolates wired and wireless, managed, and unmanaged hosts
Ì Prevents lateral movement and buys you time for remediation
Ì Detections can originate from Sophos MDR, Sophos XDR, Sophos NDR, or third-party solutions
Active Threat Response is available via Sophos Central for Sophos Wireless (AP6 Series only), Sophos Switch, and is also
supported on Sophos Firewall.
While a Sophos Firewall is not a prerequisite for this functionality on Sophos Wireless, customers who also own a Sophos Firewall benefit from different
response actions and enhanced automation, resulting in a faster time to remediation at every network layer.

Sophos WirelessAP6 Series: cloud-managed Wi-Fi 6/6E Access Points
Our latest generation of Wi-Fi 6/6E access points offers a range of models to suit many different environments. With fourindoor models and one IP67-rated outdoor model, they are ideal for both new and existing customers to replace their Wi-Fi
infrastructure as part of a network upgrade or vendor consolidation project.

Sophos AP6 SeriesWith Wi-Fi 6, broad device support is guaranteed with all AP6 models offering support for the 2.4 and 5 GHz bands. Improved
performance and better security with WPA3 add to the benefits of this WLAN generation. Wi-Fi 6E extends the capabilities andfeatures of Wi-Fi 6 into the 6 GHz band*. For further information, please visit: sophos.com/wireless.
ModelAP6 420

AP6 420E

AP6 840WLAN Standards

802.11ax

802.11ax

Wi-Fi 6Wi-Fi 6/6E

Management

AP6 840E

AP6 420X

802.11ax

802.11ax

802.11ax

Wi-Fi 6

Wi-Fi 6/6E

Wi-Fi 6Sophos Central (see management and support below). Local web interface (single AP6 only)
AP6 Series access points cannot be managed from any Sophos firewall.

DeploymentIndoor; desktop, wall, or ceiling mount

Outdoor; pole/wall mount
IP67

Radios*Dual Radio

Tri-radio

Dual Radio

Tri-radio

Dual Radio1 x 2.4 GHz single-band

1x 2.4 GHz single-band

1x 2.4 GHz single-band

1x 2.4 GHz single-band

1x 2.4 GHz single-band

1 x 5 GHz single-band

1x 5 GHz single-band

1x 5 GHz single-band

1x 5 GHz single-band

1x 5 GHz single-band

1x 6 GHz single-band
Antennas
Antenna Options

1x 6 GHz single-band

Internal omnidirectional

Internal omnidirectional

Internal omnidirectional

Internal omnidirectional

External omnidirectional----

120° Sector,
30° Directional

✔

✔

✔

✔

✔

Performance2 x 2:2

2 x 2:2

4 x 4:4

4 x 4:4

2 x 2:2

Interfaces

1x 1GE w/PoE+

1x 2.5G w/PoE+

1x 2.5G w/PoE+

1x 2.5G w/PoE++

1x 2.5G w/PoE+

DFS

1 x 2.5G without PoE
Power (max.)
Power-overEthernet (min.)**Dimensions
Width x Height x Depth
WeightCertifications andCompliance17.5 W

24.25 W

30 W

45 W

30 W

802.3at (PoE+)

802.3at (PoE+)

802.3at (PoE+)

802.3bt (PoE++)

802.3at (PoE+)

Suitable PoE+ injector
or switch available forseparate purchase

Suitable PoE+ injector
or switch available forseparate purchase

Suitable PoE+ injector
or switch available forseparate purchase

Suitable PoE++
injector or CS210-8FP
switch available forseparate purchase

Suitable PoE+ injector
or switch available forseparate purchase

225 x 43 x 225 mm

260.5 x 69 x 180 mm

183 x 35 x 183 mm

183 x 35 x 183 mm

225 x 43 x 225 mm

7.2 x 1.38 x 7.2 inches

7.2 x 1.38 x 7.2 inches

8.86 x 1.54 x 8.86 inches

8.86 x 1.54 x 8.86 inches 10.26 x 2.72 x 7.09 inches

0.7 kg

0.7 kg

1.2 kg

1.2 kg

1.6 kg

CB, UL, CE, FCC,
ISED, RCM, TEC

CB, UL, CE, FCC,
ISED, RCM, TEC

CB, UL, CE, FCC,
ISED, RCM, TEC

CB, UL, CE, FCC,
ISED, RCM, TEC

CB, UL, CE, FCC,
ISED, RCM, TEC

EN 60601-1-2 (MedicalEquipment Directive)

Plenum-rated (UL2043)

Plenum-rated (UL2043)

Plenum-rated (UL2043)

EN 60601-1-2 (MedicalEquipment Directive)

EN 60601-1-2 (MedicalEquipment Directive)

EN 60601-1-2 (MedicalEquipment Directive)

EN 60601-1-2 (MedicalEquipment Directive)* 6 GHz is not available in all regions. See https://www.wi-fi.org/countries-enabling-wi-fi-in-6-ghz-wi-fi-6e for further information.
** Additional information and guidance on powering your access points is available at https://support.sophos.com/support/s/article/KB000045501?language=en_US.Sophos WirelessPowering your access points
If you only have a single access point, a Power over Ethernet (PoE) injector will likely be sufficient. In environments withmultiple access points mounted on ceilings and walls, you’ll soon run out of power sockets.
Sophos access layer switches with PoE are the perfect enhancement to your Wi-Fi deployment. By using Sophos Central, you
can manage them from the same console as your access points.
AP6 Model

Minimum PoE Standard

Our Recommendation

802.3at PoE+ (30W per port)

Use any Sophos PoE+ injector or PoE capable switch

802.3bt PoE++ (60W per port)

Use the Sophos Switch CS210-8FP orthe Sophos PoE++ 60W injector

AP6 420
AP6 420E
AP6 420X
AP6 840
AP6 840E

Additional information and guidance is available at https://support.sophos.com/support/s/article/KB-000045501?language=en_US.

APX Model

Minimum PoE Standard

Our Recommendation

802.3af PoE (15.4W per port)

Use any Sophos PoE injector or PoE capable switch

802.3at PoE+ (30W per port)

Use any Sophos PoE+ injector or PoE capable switch

APX 120
APX 320
APX 320X
APX 530
APX 740

2.5G connectivity: No more network bottlenecks
Reap the benefits of the improved performance of Wi-Fi 6 and Wi-Fi 6E by refreshing your network infrastructure. With 2.5G
Ethernet connectivity on your access layer switches and your access points, you can prevent network bottlenecks and give
your users a better overall Wi-Fi experience.
All AP6 models (except the AP6 420) have at least one 2.5G interface built in for faster LAN connectivity. When combined with
our range of 2.5G switches, you can unlock faster speeds across your entire network.
Further information: sophos.com/switch.

1 Firewall management is not supported with the outdoor APX 320X.

Sophos WirelessManagement and support
Our single-platform approach is ideal for consolidating your security operations and improving network administration.

AP6 Series
There are two different ways to manage the AP6 Series.

Sophos Central

Local Web Interface

Our single cloud platform
to remotely manage all ofyour Sophos solutions.

A local user interface via
your browser to manage
a single AP on site.

Requires support subscription per AP.

Included in hardware purchase.

AP6 Series warranty and support
Ì AP6 Series Warranty: Limited lifetime warranty.
Ì AP6 Series Support: A support and services subscription per AP entitles you to Sophos Central
management, firmware updates, Advanced RMA, and 24/7 multi-channel support. Features delivered
via Sophos Central are only available in combination with a valid AP6 support contract.
Sophos Support remote debugging is only possible for AP6s managed in Sophos Central.

Sophos Wireless

Optional Accessories
We have a number of options available to cover different deployment scenarios.
Ì Mounting kits
 Kits for flat-ceiling, plenum, and suspend mount.
Ì Optional antennas 120° sector antenna and 30° directional antenna available for the outdoor model.
Ì POE injectors
 Suitable PoE+ and PoE++ injectors are available.
Ì Power supply External supply available for AP6 420.
Ì Sophos Switch
 The ideal option to power your Sophos access points and other PoE-capable devices. See: sophos.com/switch.

Learn more at
sophos.com/wireless

United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com© Copyright 2024. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UKSophos is the registered trademark of Sophos Ltd. All other product and company names mentioned aretrademarks or registered trademarks of their respective owners.
24-05-29 DS-EN (PS)

Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au

Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com