Sophos XGS

Sophos XGS protection with third-party threat feeds

Sophos Firewall (SFOS 21.0 and later) accepts third-party threat feeds next to Sophos X-Ops. Add Q-Feeds as one and the firewall blocks our curated malicious IPs, domains and URLs, fully compatible with XStream Protection. For step-by-step Sophos XGS configuration with third-party feeds, see our knowledge base setup guide.

Start free Sophos XGS setup guide
  • 2,500+Intelligence sources
  • 20 minFastest update interval (Premium)
  • 5 minTo full integration
  • 100%Made in Europe
What it is

What is the Q-Feeds and Sophos XGS integration?

The Q-Feeds integration brings curated cyber threat intelligence to your Sophos XGS firewall. You import Q-Feeds lists of malicious IP addresses, domains and URLs and enforce them in firewall rules and web policies, complementing Sophos XStream deep-packet inspection and Sophos X-Ops.

The intelligence updates automatically, so known-bad indicators are blocked at the edge of your network before they reach users or servers. Q-Feeds adds independent, multi-source coverage on top of your existing Sophos protection.

With three licensing tiers, from a free OSINT feed to premium intelligence refreshed every 20 minutes, the integration scales from a proof of concept to full production.

How it works

The Multi-Eyed Principle

The Multi-Eyed Principle emphasises using multiple sources of threat intelligence to strengthen the security and effectiveness of your existing firewall. By combining diverse feeds you achieve a more comprehensive, robust defence against cyber threats.

Multiple sources of IOCs

Commercial, OSINT and governmental intelligence combined in one firewall.

Simple 4-step implementation

Implementation is fast and easy with our 4-step manuals, and a proof of concept is completely free.

Benefits

Why add Q-Feeds to your firewall

  • Enhanced threat detection

    Cross-reference threat information to reduce false positives and identify genuine threats more effectively.

  • Updated every 20 minutes on Premium

    Your firewall stays ahead of the latest threats with intelligence refreshed every 20 minutes on Premium.

  • Increased resilience

    Rely on multiple sources for continuous protection and reduce the risk of blind spots in your security.

  • Improved incident response

    Faster, more precise response right on the edge of your network, saving time on internal investigations.

Licensing

Three tiers of threat intelligence

Choose the update cadence that fits your needs. Every tier is verified and curated to the same standard.

Free, OSINT intelligence updated every 24 hours

Plus, intelligence including premium sources, updated every 4 hours

Premium, updates every 20 minutes

Compare packages
Implementation

Implementation

Implementation is a breeze thanks to our native support for the Sophos Next Generation Firewall. We've created convenient manuals for every use case, so your Sophos firewall can be hardened in no time.

Sophos XGS setup guide
Custom project

Your own Sophos project?

Experience how curated threat intelligence strengthens your security posture. Integrate Q-Feeds with Sophos firewalls and start blocking known threats within minutes.

Start free
Setup

How to add third-party threat intelligence to Sophos XGS in 4 steps

  1. Create your free account

    Sign up on the Q-Feeds Threat Intelligence Portal and copy your personal feed URLs for IP, URL and domain indicators.

  2. Import the Q-Feeds feed

    In Sophos Firewall, add the Q-Feeds threat feed so the firewall imports the curated malicious IPs, domains and URLs automatically.

  3. Set the refresh interval

    Choose how often Sophos XGS pulls the feed and confirm the indicators are imported successfully.

  4. Enforce in a policy

    Reference the imported intelligence in a firewall rule or web policy to start blocking malicious traffic straight away.

Sophos XGS setup guide
More integrations

Threat intelligence feeds

Curated IP, URL and domain feeds for your whole stack.

Fortinet

Add IP, URL and domain threat feeds to your FortiGate with native External Connectors.

Palo Alto

Palo Alto firewalls can be hardened with our threat intelligence.

OPNsense

Enhance OPNsense with our intelligence using the native plugin.
FAQ

Frequently asked questions about the Sophos XGS integration

How does Q-Feeds work with Sophos XGS?

Q-Feeds delivers curated lists of malicious IPs, domains and URLs that Sophos XGS imports and enforces in firewall rules and web policies, adding independent threat intelligence to Sophos XStream protection.

Which threat feeds can I use on Sophos?

You can use IP address, domain and URL threat feeds, as well as focused categories such as phishing, botnets and malware, and enforce only what is relevant to your organisation.

How often is the threat intelligence updated?

It depends on your tier: Community updates every 24 hours, Plus every 4 hours and Premium every 20 minutes.

Does it replace my Sophos subscriptions?

No. Q-Feeds complements your existing Sophos protection with multi-source intelligence. It does not replace XStream, IPS or your Sophos licenses.

Is there a free version?

Yes. The free Community edition lets you test the Sophos XGS integration before upgrading to Plus or Premium for faster, premium intelligence.

Evaluate our intelligence today!

Simplify your security operations, start your free Q-Feeds trial and experience the difference.

Start free