CloudLabBox
Try the free demo

Sophos Firewall (XG) in EVE-NG, ready to add

Sophos Firewall, formerly XG Firewall, is in the Add Node list of every CloudLabBox workspace, with Sophos UTM 9 beside it. Practise SFOS firewall rules, NAT and VPNs against your own topology.

Choose a planCheck it in the free demo

Vendor
Sophos
In Add Node
28 images
Templates
sophosxg sophosutm
Newest
sophosxg-fw-21.0.0_GA.KVM-169

Installed versions

Every Sophos Firewall (XG) and UTM name in the Add Node image list, exactly as you’ll pick it.

Template sophosxg

Sophos Firewall (XG)

25 images on this template. Newest first.

  • sophosxg-fw-21.0.0_GA.KVM-169
  • sophosxg-fw-20.0.2_MR-2.KVM-378
  • sophosxg-fw-20.0.1_MR-1.KVM-342
  • sophosxg-fw-20.0.0_GA.KVM-222
  • sophosxg-fw-19.5.3_MR-3.KVM-652
  • sophosxg-fw-19.5.1_MR-1.KVM-278
  • sophosxg-fw-19.5.0_GA-1.KVM-197
  • sophosxg-fw-19.5.0_EAP1.KVM-144
  • sophosxg-fw-19.0.1_MR-1.KVM-365
  • sophosxg-fw-19.0.0_GA.KVM-317
  • sophosxg-fw-19.0.0_EAP1.KVM-244
  • sophosxg-fw-18.5.3_MR-3.KVM-408
Show 13 older
  • sophosxg-fw-18.5.2_MR-2.KVM-380
  • sophosxg-fw-18.5.1_MR-1.KVM-326
  • sophosxg-fw-18.5.1_MR-1.KVM-318
  • sophosxg-fw-18.0.5_MR-5.KVM-586
  • sophosxg-fw-18.0.5_MR-5.KVM-574
  • sophosxg-fw-18.0.4_MR-4.KVM-506
  • sophosxg-fw-18.0.3_MR-3.KVM-457
  • sophosxg-fw-18.0.1_MR-1-Build396.KVM-396
  • sophosxg-fw-18.0.0_GA-Build379.KVM-379
  • sophosxg-fw-17.5.14_MR-14.KVM-711
  • sophosxg-fw-17.5.14_MR-14-1.KVM-714
  • sophosxg-fw-17.5.13_MR-13.KVM-692
  • sophosxg-fw-17.5.12_MR-12.KVM-664

Template sophosutm

Sophos UTM 9

3 images on this template. Newest first.

  • sophosutm-UTM-9.705-3.1
  • sophosutm-UTM-9.703-3.1
  • sophosutm-UTM-9.702-1.1

Add it to a lab

In Add Node, choose the template, then the image. The template fills in these settings; change them before you start the node.

Add Node defaults for Sophos Firewall (XG) and UTM, read from the EVE-NG templates on 28 October 2026
ImageTemplateCPURAMInterfacesConsole
Sophos Firewall (XG)sophosxg12048 MB4 interfacesVNC
Sophos UTM 9sophosutm24096 MB6 interfaces: eth0 to eth5VNC

EVE-NG admits a node by the CPU and RAM set on it, so a running node counts against your plan at these values. The largest of these templates starts nodes at 2 vCPU and 4,096 MB, which fits the free demo’s 6 vCPU and 8 GB, so you can start one there and open its console.

See default usernames and passwords Read every node tip

IPsec between Sophos Firewall and a FortiGate

Join a Sophos Firewall and a FortiGate across an IOSv router that plays the internet, and build a site-to-site IPsec tunnel between the two vendors. You practise matching proposals and checking a tunnel from both ends.

  • 1×Sophos Firewall (XG) sophosxg1 vCPU, 2048 MB
  • 1×FortiGate fortinet1 vCPU, 1024 MB
  • 1×IOSv vios1 vCPU, 1024 MB

Added with these defaults, the lab uses 3 vCPU and 4 GB of RAM. The smallest plan that fits is Lite, with 6 vCPU and 8 GB: £3 a day, or £0.50 an hour On-Demand.

Choose a planGive nodes more CPU or RAM and you add that instead.

Licences are yours to bring

CloudLabBox doesn't provide Sophos licences. Register the firewall with your own licence or a Sophos evaluation, and request Sophos's activation destinations from your Account page.

The images run only inside your CloudLabBox workspace; they aren’t available to download.

Questions about Sophos Firewall (XG) and UTM

What are Sophos Firewall (XG) and UTM?

Sophos Firewall, formerly XG Firewall, runs the SFOS operating system and is managed from its web console. Sophos UTM 9, the older platform, is installed too.

What are Sophos Firewall's interfaces called in EVE-NG?

EVE-NG labels its four interfaces PortA to PortD, and the node opens on a VNC console.

Should I use the Sophos Firewall or the UTM images?

Use Sophos Firewall, on the sophosxg template, for current SFOS labs. Sophos UTM 9 is the older platform, on its own sophosutm template; pick it only if your course or network still runs UTM.

Which Sophos Firewall (XG) and UTM images are installed?

28 images (25 Sophos Firewall (XG), 3 Sophos UTM 9), all listed on this page exactly as Add Node shows them. The newest is sophosxg-fw-21.0.0_GA.KVM-169.

How much CPU and RAM does a Sophos Firewall (XG) and UTM node use?

When you add one, the sophosxg template adds 1 vCPU and 2048 MB of RAM; the sophosutm template adds 2 vCPU and 4096 MB of RAM. You can change both in Add Node, and your plan counts what each running node is set to.

More images

CloudLabBox is independent of the vendors named on this page. Their names identify the images in the workspace’s Add Node list.