Sophos is pretty scalable. However, you have to invest in memory on the virtual server because Sophos is not cheap on memory. It requires more memory to do its job.

This solution is scalable.

If they are using Sophos Central then they are using the cloud solution and they do not need to plan for expanding their solution.

If they are using the on-premises solution then the number of hosts might increase, and they will have to upgrade the management console on the server.

We have found that it scales well for every environment. Depending on how well you size particular solutions. So to be able to size it well for the environment scalability isn't a problem. One good thing about it is that it now has some new features to help is scale better.