Sophos Firewall XGS & Intercept X Installation and Support in Saudi Arabia

SKYLINE installs, configures, supports and troubleshoots the full Sophos security stack for organisations across Saudi Arabia. Whether you are protecting a single branch in Riyadh, a regional headquarters in Jeddah, or a distributed enterprise with sites in Dammam and the Eastern Province, our engineers design, deploy and operate Sophos Firewall XGS appliances, Sophos Intercept X endpoint protection and the cloud-based Sophos Central management console as one synchronised platform.

Sophos is one of the world's most widely deployed next-generation firewall and endpoint vendors, and its Synchronized Security architecture lets the firewall and endpoints share threat intelligence in real time. SKYLINE helps Saudi businesses unlock that integration end to end: from sizing and racking the XGS appliance, through firewall rule and NAT design, to rolling out Intercept X agents to every Windows, macOS, Linux and server workload from a single console.

We are an independent integrator. We do not publish vendor partner tiers on this page; instead we focus on what we actually do for you: install, configure, support, fix and develop Sophos deployments to fit your network, compliance needs and budget. For licensing and procurement, visit our software licensing marketplace.

The Sophos XGS Series spans desktop appliances for small and branch offices through 1U distributed-edge units up to 2U enterprise and campus-edge models. SKYLINE sizes the right appliance for your throughput and user count, then performs a clean installation against the Sophos Firewall OS (SFOS).

• Desktop / SMB and branch: XGS 87, 107, 116, 126 and 136 (with Wi-Fi 'w' variants and optional 5G expansion module on 116/126/136) for shops, clinics and small offices.
• 1U distributed edge: XGS 2100, 2300, 3100, 3300, 4300 and 4500 for medium businesses and regional sites, built on AMD x86 CPUs with the dedicated Xstream Flow network processor.
• 2U enterprise and campus edge: high-end models up to the XGS 7500 and XGS 8500 supporting connectivity up to 100 Gbps for data centres and large campuses.

Every appliance uses the Sophos Xstream architecture, where a dedicated Xstream Flow processor offloads trusted traffic so deep packet inspection and TLS 1.3 decryption run without crippling throughput. Our installation covers racking, interface and zone planning (LAN, WAN, DMZ, VPN), high-availability (active-passive HA) pairing where required, and a documented firmware baseline so your XGS is production-ready from day one.

A firewall is only as strong as its policy. SKYLINE builds a least-privilege rule base under PROTECT > Rules and policies > Firewall rules, defining source and destination zones, networks, services and actions instead of broad 'Any-Any' rules. We design NAT under Rules and policies > NAT rules — source NAT (SNAT / masquerading) for outbound traffic and destination NAT (DNAT) or Full NAT to publish internal services safely on public IPs.

Beyond rules and NAT, our configuration service covers: IPsec and SSL site-to-site VPN, remote-access VPN and ZTNA for hybrid workers, Web and Application Control, Intrusion Prevention (IPS), web filtering and TLS inspection, email protection, SD-WAN link balancing and failover, and central logging or integration with Sophos Central reporting. We document every rule and NAT entry so your team can audit and extend the configuration with confidence. For the exact command-line steps, see our knowledge base article on configuring Sophos Firewall XGS rules from the CLI.

Sophos Intercept X is one of the strongest endpoint and server protection platforms available, combining AI deep-learning malware prevention, Exploit Prevention, and the CryptoGuard anti-ransomware engine that detects malicious encryption and automatically rolls affected files back to their pre-attack state. SKYLINE deploys Intercept X to Windows, macOS, Linux and server workloads entirely from the cloud-based Sophos Central console.

Our deployment service includes building device groups and tamper-protected policies, mass-rolling the agent via the Central installer (silent install on Windows, scripted install on Linux servers), and configuring EDR/XDR threat-hunting with the Sophos Data Lake and Live Discover so your team can query the whole estate. Note that Sophos has been renaming its portfolio — Intercept X Advanced becomes Sophos Endpoint and the XDR edition becomes Sophos XDR — and we map your existing or new licences to the correct product set.

The real advantage of running both Sophos Firewall and Intercept X is Synchronized Security. The firewall and endpoints continuously exchange health status over the Security Heartbeat. When Intercept X detects a compromised device, its heartbeat turns Red, the firewall instantly limits that host's network access and applies lateral movement protection — isolating the device even from healthy endpoints on the same switch or subnet. Once the threat is cleaned, the heartbeat returns to Green and access is restored automatically.

SKYLINE configures this integration end to end so detection-to-containment drops from minutes to seconds, with no manual intervention. It is exactly the kind of automated defence Saudi organisations need to meet rising ransomware and NCA cybersecurity expectations.

Deployment is just the start. SKYLINE provides ongoing support and Annual Maintenance Contracts (AMC) for Sophos environments across the Kingdom. Our troubleshooting covers dropped-traffic analysis (live drop-packet-capture and tcpdump from the device console), VPN tunnel diagnostics, throughput and HA issues, firmware upgrades, certificate and TLS-inspection problems, and Intercept X agent health and detection investigations in Sophos Central.

AMC tiers can include health checks, firmware and pattern updates, rule-base reviews, quarterly reporting, and priority remote and on-site response in Riyadh, Jeddah and Dammam. We also handle migrations — from legacy UTM/SG to XGS, from competing firewalls to Sophos, or from another endpoint product to Intercept X — with clear cutover plans and rollback safety. Ready to start? Contact our team or call +966 50 993 9334.