PAYG vs BYOL

UTM supports Pay As You Go (PAYG) and Bring Your Own License (BYOL) pricing and is available in all AWS Marketplace regions. PAYG allows you to deploy UTM without any software licenses and pay an hourly usage fee based on the pricing listed on AWS Marketplace. PAYG is managed directly through AWS who charges your usage directly to your AWS monthly statement. Additionally, PAYG comes preconfigured with Essential Firewall, Network Protection, Web Protection, and Web Server Protection modules enabled. For more information about the different UTM modules, please see Sophos UTM Overview.

BYOL allows you to purchase a software licenses for one, two, or three years in advance from a Sophos partner without incurring any hourly fees except for the EC2 instance charge. BYOL also allows you to pick and choose which UTM modules to enable in addition to the Sandstorm module not available in PAYG (https://www.sophos.com/en-us/lp/sandstorm.aspx). To inquire about purchasing BYOL for Sophos UTM on AWS, please email aws.marketplace@sophos.com for details.

The following table shows each UTM product in AWS Marketplace, the deployment models supported, and pricing.

Product Name Deployment Models Supported
Sophos UTM (PAYG)

Stand Alone UTM

Stand Alone UTM with HA (cold and warm standby)

Sophos UTM (BYOL)

Stand Alone UTM

Stand Alone UTM with HA (cold and warm standby)

Sophos UTM  (Auto Scaling PAYG) Auto Scaling UTM
Sophos UTM  (Auto Scaling BYOL) Auto Scaling UTM