Overview:
The smarter way to simple, secure Wi-Fi
Sophos Wireless and our unified cloud management platform
simplify your wireless network management and security, saving
you valuable time and resources.
Sophos Wireless: As Easy as 1-2-3
Your Wi-Fi networks will be up and running in no time with our three-step setup.
One Platform
With our single-platform approach, your Wi-Fi is always just one click away from your
next Sophos solution. You can manage your Wi-Fi alongside your firewalls and switches,
endpoint and server security, email protection, and more.
Two Ways to Manage
Remotely manage your full Wi-Fi estate in Sophos Central or make individual AP settings
in the local user interface (AP6 Series only).
Three Steps to Connect
Sophos Wireless is easy to set up and deploy. Create a wireless network, register your
access point, save, and connect. This simple onboarding process ensures that your Wi-Fi
networks are up and running in minutes.
Our Pragmatic Approach to Cybersecurity
Our range of award-winning solutions and services simplifies your security and allows
you to focus on your core business objectives. While your IT peers are switching from one
console to the next in their complex, multi-vendor environments, you can have a single
pane of glass for everything.
Spotlight on Secure Access
Our portfolio includes products and solutions for secure access inside and outside of your
network. We offer ZTNA to provide granular access to applications, SD-WAN and remote
Ethernet devices to secure your branch office connectivity, Sophos firewalls for the
ultimate in network security and performance, and switches to power your access points
and offer better network control.
You could use multiple consoles to manage your access and security, but all you need is one.
Highlights
- Scalable cloud platform for
remote management
- Local web interface to
manage a single AP
- Better performance and
security with Wi-Fi 6/6E
access points
- Wi-Fi 5 option available for
firewall management
- Captive portal for guest and
visitor access
- Managed alongside the
entire Sophos ecosystem of
cybersecurity solutions
Wi-Fi Portfolio:
As a scalable, cloud-managed solution, with support for the latest generation of Wi-Fi 6/6E access points, Sophos Wireless is
our recommendation for all of your wireless networks. This overview explains all currently available options to set up and secure
Wi-Fi networks.
Sophos Wireless
Cloud-Managed Wi-Fi
Sophos Wireless is our Sophos Central-managed Wi-Fi solution. It offers the broadest feature set, the best scalability, and
exclusive support for the latest generation of Wi-Fi 6/6E access points, the AP6 Series.
As a single management platform for all of your Sophos security solutions, Sophos Central puts your Wi-Fi management
just one click away from your firewalls and switches, endpoint and server security, email protection, and more.
The following access points can be managed in Sophos Central:
- AP6 Series: Wi-Fi 6/6E 802.11ax (all models))
- APX Series: Wi-Fi 5 802.11ac Wave 2 (all models)
Sophos Firewall
Firewall as a Controller
If you have an environment with very basic Wi-Fi needs for a smaller number of connecting clients, Sophos Firewall can
be used as a Wi-Fi controller. While this option does not offer the scalability of our cloud-managed Wi-Fi, it is popular with
customers looking for a more traditional, on-premises, all-in-one solution.
The following access points can be managed in Sophos Firewall:
- APX Series: Wi-Fi 5 802.11ac Wave 2 (all indoor models)
Integrated Wi-Fi Models
All of our XGS Series desktop form-factor firewalls are available with integrated Wi-Fi. This option is suitable for smaller
deployments, such as retail stores, where a single device is deployed for network security.
The following XGS Series firewalls have integrated Wi-Fi:
- XGS Series: XGS 87w, 107w, 116w, 126w, 136w
The following XGS Series firewalls additionally support the use of an optional Wi-Fi module:
- XGS Series: XGS 116w, 126w, 136w
Sophos Wireless:
Sophos Wireless: Scalable, Cloud-Managed Wi-Fi
As more and more businesses shift infrastructure and solutions to the cloud, and remote and hybrid working models
accelerate the demand for more flexibility, switching your Wi-Fi management to Sophos Central is not only a way to make
better use of your resources, but it’s also your path to the latest features and technology for a truly scalable Wi-Fi experience.
Sophos Wirless
Cloud scalability
While on-premises, controller-based solutions can be limited by hardware resources, with Sophos Wireless, extending your network is as simple as adding an additional access point.
Remote management via a single platform
Sophos Central provides a single cloud platform to remotely manage your Wi-Fi alongside your firewalls and switches, endpoint and server security, email protection, mobile, and much more.
Better performance and security
With exclusive support for our Wi-Fi 6/6E, AP6 Series, access points, you get a significant performance improvement, 2.5G connectivity, and support for the latest WPA3 security standard.
Click and connect
Whether you’re a wireless pro or an IT all-rounder with limited Wi-Fi knowledge, our user interface will guide you through access point registration and network configuration, so that your users are connected.
Improved guest access experience
When the first thing people do upon entering your premises is look for the Wi-Fi password, Sophos Wireless has you covered. Give your employees, guests, and visitors a better Wi-Fi experience with our many authentication options.
Why choose Wi-Fi 6/ Wi-Fi 6E (802.11ax)?
Wi-Fi 6 was designed to improve security, performance, and the overall network experience.
Performance: Particularly in high-density environments, Wi-Fi 6 provides better throughput-per-area, which results in
faster speeds and lower latency for each and every user.
Security: WPA3 replaces some of the weak spots of its predecessor, such as the Pre-Shared Key (PSK), for a more secure
initial key exchange, and mandates the 192-bit cryptographic strength in Enterprise mode for better overall security.
6 GHz Band: Wi-Fi 6E extends the capabilities and features of Wi-Fi 6 into the 6 GHz band to make use of a cleaner, less
congested space. 6 GHz support may not be available in all regions.
Specifications:
|
APX 120 |
APX 320 |
APX 530 |
APX 740 |
APX 320X |
| Management |
Cloud: Sophos Central
On-premises: Sophos XG Firewall (v17.5.3/v17.5.5) or SG UTM (v9.7) |
Cloud: Sophos Central |
| Deployment |
Indoor; desktop, wall, or ceiling mount. |
Outdoor; pole/wall mount |
| WLAN Standards |
802.11 a/b/g/n/ac Wave 2 |
| Radios |
1x 2.4 GHz single-band
1x 5 GHz single-band |
1x 2.4 GHz/5 GHz dual-band
1x 5 GHz single-band
1x Bluetooth low energy (BLE) |
1x 2.4 GHz single band
1x 5 GHz single band
1x Bluetooth low energy (BLE) |
1x 2.4 GHz/5 GHz dual band
1x 5 GHz single band
1x Bluetooth low energy (BLE)
*Regional restrictions apply |
| Antennas |
2x internal dual-band antenna for Radio-0 and 1 |
2x internal dual-band antenna for Radio-0
2x internal 5 GHz antenna for Radio-1
1x internal 2.4 GHz antenna for BLE (for future use) |
3x internal 2.4 GHz antenna for Radio-0
3x internal 5 GHz antenna for Radio-1
1x internal 2.4 GHz antenna for BLE (for future use) |
4x internal 2.4 GHz antenna for Radio-0
4x internal 5 GHz antenna for Radio-1
1x internal 2.4 GHz antenna for BLE (for future use) |
4x external dual band antenna for Radio-0 and Radio-1 (omni-directional)
1x internal 2.4 GHz antenna for BLE (for future use) |
| Antenna Options |
|
|
|
|
120° Sector, 30° Directional |
| DFS |
|
|
|
|
|
| Performance |
2x2:2 MU-MIMO |
2x2:2 MU-MIMO |
3x3:3 MU-MIMO |
4x4:4 MU-MIMO |
2x2:2 MU-MIMO |
| Interfaces 1x 12V DC-in |
1x 12V DC-in (power supply not included)
1x RJ45 10/100/1000 Ethernet w/PoE |
1x RJ45 connector console serial port
1x RJ45 10/100/1000 Ethernet w/PoE |
1x RJ45 connector console serial port
1x RJ45 10/100/1000 Ethernet port
1x RJ45 10/100/1000 Ethernet w/PoE |
1x RJ45 10/100/1000 Ethernet w/PoE |
| Power (Max.) |
11.8 W |
11.5 W |
16.7 W |
22.4 W |
18.9 W |
| Power-over-Ethernet (Min.) |
PoE 802.3af |
PoE+ 802.3at |
| Dimensions |
144x144x33.5 mm |
155x155x38 mm |
183x183x39 mm |
195x195x43 mm |
180 x260.5x87 mm |
| Weight |
0.256 kg |
0.474 kg |
0.922 kg |
1.012 kg |
1.42 kg |
| Certifications & Compliance** |
CB, UL, CE, FCC, ISED (IC), RCM, MIC, Anatel, EN 60601-1-2 (Medical Equipment Directive) |
CB, UL, CE, FCC, ISED (IC), RCM, MIC, NCC, Anatel, EN 60601-1-2 (Medical Equipment Directive) Plenum-rated (UL2043) |
CB, UL, CE, FCC, ISED (IC), RCM, Anatel, EN 60601-1-2 (Medical Equipment Directive) Plenum-rated (UL2043) |
CB, UL, CE, FCC, ISED (IC), RCM, Anatel, EN 60601-1-2 (Medical Equipment Directive) Plenum-rated (UL2043) |
CE, FCC, IC (ISED), RCM, CB, UL. Anatel, NOM (planned) |
*Regulatory restrictions in some regions prevent the use of some 5 GHz channels in outdoor environments, therefore Radio-1 cannot be used in the countries listed here
Powering Your Access Points:
If you’re only using a single access point then a Power over Ethernet (PoE) injector will likely be sufficient. In environments with
multiple access points mounted on ceilings and walls, you’ll soon run out of power sockets.
Sophos access layer switches with Power over Ethernet are the perfect enhancement to your Wi-Fi deployment. By using
Sophos Central, you can manage them from the same console as your access points.
| AP6 Model | Minimum PoE Standard | Our Recommendation |
| AP6 420 |
802.3at PoE+ (30W per port) |
Use any Sophos PoE+ injector or PoE capable switch |
| AP6 420E |
| AP6 420X |
| AP6 840 |
| AP6 840E |
802.3bt PoE++ (60W per port) | Use the Sophos Switch CS210-8FP or an 802.3bt
compatible third-party injector or switch |
2.5G Connectivity: No More Network Bottlenecks
Reap the benefits of the improved performance of Wi-Fi 6 and Wi-Fi 6E by refreshing your network infrastructure. With 2.5G
Ethernet connectivity on your access layer switches and your access points, you can prevent network bottlenecks and give
your users a better overall Wi-Fi experience.
All AP6 models (except the AP6 420) have at least one 2.5G interface built-in for faster LAN connectivity. When combined with
our range of 2.5G switches, you can unlock faster speeds across your entire network.
Management & Support
Our Wi-Fi solutions can all be managed in different ways and offer slightly different support options.
AP6 Series
There are two different ways to manage the AP6 Series.
AP6 Series Warranty and Support
- AP6 Series Warranty: Limited Lifetime Warranty.
- AP6 Series Support: A Support and Services subscription per AP entitles you to Sophos Central
management, firmware updates, Advanced RMA, and 24x7 multi-channel support.
Sophos support remote debugging is only possible for AP6s managed in Sophos Central
APX Series
Our indoor Wi-Fi 5 APX Series models can be managed from Sophos Firewall (XG/XGS) without the need for an additional
license (included in Base License). While Sophos Central management is also possible (no license required), we recommend
the AP6 Series for cloud management
- The APX 320X outdoor model can be managed from Sophos Central only.
- A local user interface is not available for the APX Series.
APX Series Warranty and Support
- APX Series Warranty: Five years or until end-of-life date (See Retirement Calendar).
- APX Series Support (Firewall Managed): A valid Support contract for your Sophos Firewall appliance
(XG/XGS) entitles you to firmware updates, Advanced RMA, and 24x7 multi-channel support.
- The same support applies for APX models managed in Sophos Central without an additional
license. However, we recommend AP6 for Sophos Central management.
Documentation:
Download the Sophos Wireless Data Sheet (PDF).
Download the Licensing Guide (APX) (PDF).
