Sophos Adds AI Service Controls and Coordinated Network Defense Tools

What Readers Should Know
Sophos announced Firewall v23, new XGS appliances, and expanded network detection capabilities. The update includes AI service controls, administrative assistance, and coordinated security through Sophos Fusion.
Key Takeaways
- Firewall v23 adds visibility and policy controls for AI service use.
- An AI Assistant helps administrators review configurations and draft rules.
- Four new XGS appliances expand the hardware lineup.
- A standalone NDR offering adds detection and inline response capabilities.
- NDR general availability is scheduled for November 10.
Firewall v23 anchors an update covering administration, hardware performance, and network detection.
Sophos has announced a network security update aimed at helping organizations manage growing traffic, AI service use, and threats across increasingly connected environments.
The release centers on Sophos Firewall v23, alongside new XGS appliances, a standalone network detection and response offering, and changes to workspace protection and licensing.
For IT teams, one practical addition is greater visibility into AI services used across the network. Integration with Sophos AI Defense provides reporting and policy controls intended to help organizations approve trusted generative AI tools and restrict services they have not authorized.
A new AI Assistant helps administrators understand firewall configurations and prepare rules for review. A modern REST API also supports automation.
The hardware lineup adds the XGS 2380, 3380, 4580, and 5580. Sophos says the new appliances deliver up to four times higher protected throughput than earlier 1U models, with performance varying by model and workload.
The company also announced a standalone Sophos NDR offering combining behavioral detection, deep packet inspection, and intrusion detection and prevention capabilities. Its Active Inline mode can drop packets identified as malicious before they reach their destination, according to Sophos.
These tools connect through Sophos Fusion, which the company describes as an architecture for sharing security context and coordinating responses across control points.
Sophos Firewall v23, Xstream Plus licensing, and the new XGS hardware are generally available. The standalone NDR offering is scheduled for general availability on November 10, subject to licensing and regional exceptions.
For organizations adopting more AI tools, the update focuses on a familiar operational need: understanding what is happening on the network and giving security teams a consistent way to respond.
Frequently Asked Questions
What is the main software update?
Sophos Firewall v23.
How does it address AI service use?
Through visibility, reporting, and policy enforcement integrated with Sophos AI Defense.
What does the AI Assistant do?
It helps administrators understand configurations and draft rules for review.
Which new hardware models were announced?
XGS 2380, 3380, 4580, and 5580.
When is standalone Sophos NDR scheduled to become available?
November 10, subject to regional and licensing conditions.