Secure Wi-Fi APX Series

Description

APX Series

The Sophos Secure Wi-Fi APX Series delivered enterprise Wi-Fi 5 performance with the flexibility of cloud or firewall management. It served as the primary Sophos wireless portfolio prior to the introduction of the Wi-Fi 6/6E AP6 Series.

Performance and Architecture

Models range from 2×2:2 to 4×4:4 MU-MIMO. Dual-radio operation on 2.4 and 5 GHz bands supports a mix of client devices common in Wi-Fi 5 era deployments.

Management Flexibility

Unlike the AP6 Series (Central-only), APX access points can be managed from Sophos Central or controlled by a Sophos Firewall/UTM. This dual option remains useful for organizations that have not fully transitioned to cloud management.

Lifecycle and Migration

With End-of-Sale completed and End-of-Life set for December 31, 2027, organizations should plan migration to the AP6 Series. The AP6 portfolio offers higher efficiency, optional 6 GHz support, improved capacity, and a longer support horizon.

Why Reference the APX Series Today?

For documentation of existing installations, spare-part planning, and structured migration projects. New purchases should target the AP6 Series.

Migration Guidance to AP6 Series

Recommended Replacements

Migration Considerations

AP6 models are managed exclusively via Sophos Central (local UI for a single AP). They cannot be managed from Sophos Firewall. Plan for Central onboarding, SSID and policy migration, and any required PoE upgrades (especially for 840E which requires PoE++).

Mounting Overview

Indoor APX models typically support desktop, wall, and ceiling (T-bar) mounting. The outdoor APX 320X supports wall and pole mounting and is supplied with appropriate hardware. Always follow the specific mounting instructions for each model.

Installation and Support Best Practices

For remaining APX installations: keep firmware current within the supported window, monitor End-of-Life timelines, maintain accurate inventory, and prioritize migration of high-density or outdoor units first. Use outdoor-rated cabling and proper grounding for any APX 320X deployments.

Benefits for Existing Installations

Continued operation until December 31, 2027 on supported platforms. Familiar management for teams already using Sophos Firewall as a wireless controller. Proven stability in environments that do not yet require Wi-Fi 6 features.

Who Should Still Reference the APX Series?

Organizations with existing APX fleets that need documentation, spare units (while stock lasts), or a clear migration roadmap. New deployments should select from the AP6 Series.

APX Series vs AP6 Series Comparison

Analysis

The APX Series remains functional for existing sites until End-of-Life. The AP6 Series is the clear path forward for performance, efficiency, optional 6 GHz, and long-term support.

Frequently Asked Questions

What is the Sophos APX Series?

The previous generation of Sophos Secure Wi-Fi access points based on Wi-Fi 5 (802.11ac Wave 2), available in indoor and outdoor models.

Is the APX Series still available for purchase?

End-of-Sale occurred on March 31, 2024. Limited remaining stock may still be available from some distributors.

When is End-of-Life?

December 31, 2027. After this date, support ends.

Can APX access points be managed from Sophos Firewall?

Yes. Unlike the AP6 Series, APX models can be managed from Sophos Firewall or UTM as a wireless controller, in addition to Sophos Central.

What is the recommended replacement?

The AP6 Series. Specific model recommendations are listed in the migration table above.

Does any APX model support 6 GHz?

No. 6 GHz (Wi-Fi 6E) is available only on selected AP6 models (420E and 840E).

Is there an outdoor APX model?

Yes – the APX 320X with IP67 rating. Its successor is the AP6 420X.

Should new projects still use APX?

No. New projects should use the AP6 Series for current technology and longer support life.