Sophos Products are licensed or made available by the applicable units specified in the table below. The Schedule issued by Sophos specifies the number of applicable units that the Customer has ordered for each Product.
Sophos reserves the right to change or update these Licensing Guidelines at any time and the updated Licensing Guidelines will be effective when posted on the website.
The following definitions apply to the table below:
Definitions for Sophos Products
1.'Computer' means any device or computing environment which benefits from the Product (for example, but without limitation, workstations, personal computers, laptops, netbooks, tablets, smartphones, and environments connected to an email server, an internet proxy or a gateway device, or a database). The Product does not have to be physically installed on the computer environment to provide benefit, nor is there a requirement for the computing hardware to be owned by the Customer. The term Computer as defined herein includes, without limitation, non-persistent deployments, electronic devices that are capable of retrieving data, and virtual machines.
2. 'Server' means a Computer (i) upon which the Product is installed or (ii) which benefits from the Product, wherein the Computer provides at least one application, client service, or capability.
3. 'User' means an employee, consultant or other individual who benefits from the Product.
NOTE: The Product does not have to be physically installed on the User's computer environment in order to provide benefit to the User.
4. 'Cloud Asset' means a single virtual machine instance (including any server instance or database instance) or container image, within a Cloud Environment that benefits from, or whose configuration is accessed by, the Product. For the purposes of this definition, ‘Cloud Environment’ means an environment facilitating or involved in the delivery of computing services over the internet, including but not limited to Amazon Web Services (AWS) accounts, Microsoft Azure subscriptions, Google Cloud Platform (GCP) projects, Kubernetes clusters, development code repositories, and container registries.
Terms for Products
General exception for Education, Health and Government Entities:
If Licensee or Customer is an educational, health or government entity, Products or Services that are usually licensed or made available on a per User basis may alternatively, at Sophos’ option, be licensed or made available on a per Computer basis, or for email Products only, on a per mailbox basis. If a bundle includes both email and non-email Products, the aforementioned licenses must be the higher of the entity’s Computer and mailbox count. If Licensee subsequently transfers such Products or Services to an entity that does not fall within the education, health or government sector then the License Entitlement or Service Entitlement shall revert to calculation on a per User basis.
Number of Computers (Devices) per User:
In the case of Products licensed or made available by User, each User may use a reasonable number of Computers unless a specific cap on Computers per User is stated in the table below. Sophos reserves the right to apply a cap on Computers where usage is deemed unreasonable.
Where permitted, Customer may request a "trial" license or subscription of a commercially available Product for evaluation purposes. In some cases, "evaluation" licenses or subscriptions may be generated automatically by Sophos, in its sole discretion, for Customers of Sophos Central Endpoint Protection and Server Protection Products; for example, in order to enable testing of pre-release features and Products, and/or for applicable temporary license or subscription extensions.
|Sophos Product||Licensing Model||Applicable Unit||NOTES.EXCEPTIONS AND APPLICABLE LIMITS|
|Sophos Central Products|
|Cloud Optix Advanced||Subscription||Cloud Assets|
A subscription includes a maximum number of Cloud Assets.
The following Data Lake use limitations apply:
|Cloud Optix Standard||Subscription||Cloud Assets|
Entitlement is included with Central Intercept X Advanced for Server. Not available for standalone purchase.
Includes a maximum number of Cloud Assets at 120% of your Central Intercept X Advanced for Server license entitlement.
|Central Intercept X Advanced for Server with XDR||Subscription||per Server|
Following Data Lake usage limitations apply:
Includes entitlement to Cloud Optix Standard.
|Central Intercept X Advanced for Server||Subscription||per Server||Includes entitlement to Cloud Optix Standard.|
|Central Intercept X Essentials for Server||Subscription||per Server||N/A|
|Central Server Protection||Subscription||per Server||N/A|
|Sophos Capsule8 Protect||Subscription||per Server||N/A|
|Sophos Capsule8 Protect+||Subscription||per Server||N/A|
|Sophos Capsule8 Complete||Subscription||per Server||N/A|
|Central Intercept X Advanced with XDR||Subscription||per User|
Following Data Lake usage limitations apply:
|Central Intercept X Advanced||Subscription||per User||N/A|
|Central Endpoint Intercept X||Subscription||per User||N/A|
|Central Intercept X Essentials||Subscription||per User||N/A|
|Central Endpoint Protection||Subscription||per User||N/A|
|Central Mobile Advanced||Subscription||per User||Maximum upload size: 25 MB for documents, 300 MB for apps|
|Central Mobile Standard||Subscription||per User||Maximum upload size: 25 MB for documents, 300 MB for apps|
|Intercept X for Mobile||Subscription||per User||N/A|
|Central Device Encryption||Subscription||per User||N/A|
|Central Email Standard||Subscription||per User||N/A|
|Central Email Advanced||Subscription||per User||N/A|
|Central Portal Encryption||Subscription||per User||Only available as an add-on for Central Email Advanced.|
|Zero Trust Network Access||Subscription||per User|
Two deployment modes available: on premise and Sophos Cloud gateway.
Following usage limitations apply to Sophos Cloud gateway mode:
|Central Phish Threat||Subscription||per User||Each user who is sent mail from Phish Threat is considered to benefit from the product and requires a User license.|
|UTM and Sophos Firewall purchased on hardware appliance|
|FullGuard||Subscription||per hardware appliance|
|EnterpriseGuard||Subscription||per hardware appliance|
|Network Protection||Subscription||per hardware appliance|
|Web Protection||Subscription||per hardware appliance|
|Email Protection||Subscription||per hardware appliance|
|Wireless Protection||Subscription||per UTM appliance|
|Webserver Protection||Subscription||per hardware appliance|
|Sandstorm (for UTM)||Subscription||per hardware appliance|
|Zero-Day Protection (for Sophos Firewall)||Subscription||per hardware appliance|
|BasicGuard||Subscription||per hardware appliance|
|Xstream Protection||Subscription||per hardware appliance|
|Standard Protection||Subscription||per hardware appliance|
|Central Orchestration||Subscription||per hardware appliance|
|UTM Virtual Software|
|FullGuard||Subscription||per User||When a User communicates with or through the gateway (including without limitation DNS and DHCP queries to the gateway and communications both to the Internet and a different LAN segment), their IP address is added to list of licensed devices in the gateway’s local database. If several Users communicate through a single device then every User is counted as a separate User. If an IP address has not been used in the last seven (7) days, it is removed from the database.|
|Network Protection||Subscription||per User|
|Web Protection||Subscription||per User|
|Email Protection||Subscription||per User|
|Wireless Protection||Subscription||per User|
|Webserver Protection||Subscription||per User|
|Sophos Firewall Virtual Software|
|Base License||Perpetual||per virtual Computer||Selection of licenses by number of CPU cores and amount of memory is available|
|FullGuard||Subscription||per virtual Computer|
|EnterpriseGuard||Subscription||per virtual Computer|
|Network Protection||Subscription||per virtual Computer|
|Web Protection||Subscription||per virtual Computer|
|Email Protection||Subscription||per virtual Computer|
|Webserver Protection||Subscription||per virtual Computer|
|Xstream Protection||Subscription||per virtual Computer|
|Standard Protection||Subscription||per virtual Computer|
|Central Orchestration||Subscription||per virtual Computer|
|Zero-Day Protection||Subscription||per virtual Computer|
|Sophos Central Firewall Reporting|
|Central Firewall Reporting Advanced||Subscription||GB storage capacity per Hardware appliance or per virtual Computer|
A subscription includes a maximum number reports generated per Hardware appliance or per virtual Computer as follows:
|Other UTM Products|
|UTM Endpoint Protection||Subscription||per User||Sold in license packs|
|Managed Services||Licensing Model||Applicable Unit||Notes and Exceptions|
|Managed Detection and Response Essentials||Subscription||per User||One subscription includes 1 license to Central Intercept X Advanced with XDR.|
|Managed Detection and Response Complete||Subscription||per User||One subscription includes 1 license to Central Intercept X Advanced with XDR.|
|Managed Detection and Response Essentials Server||Subscription||per Server||One subscription includes 1 license to Central Intercept X Advanced for Server with XDR.|
|Managed Detection and Response Complete Server||Subscription||per Server||One subscription includes 1 license to Central Intercept X Advanced for Server with XDR.|
|Rapid Response||Subscription||per User and per Server||One subscription includes 1 license to Central Intercept X Advanced with XDR endpoint or server.|
|Compromise Assessment||Subscription||per Computer||One subscription includes a 7 day subscription to analysis of bands of Computers (5, 10, or 20 Computers).|
|Incident Response Retainer||Subscription||N/A||Entitlement includes a maximum number of device count applicable to customer's purchase.|
|Integration Pack Add-Ons and Data Retention||Licensing Model||Applicable Unit||Notes and Exceptions|
|Network Detection and Response||Subscription||per User and per Server||Available to customers with Managed Detection and Response and Central Intercept X Advanced with XDR licenses (User and Server).|
|Public Cloud Integration Pack||Subscription||per User and per Server|
|Email Integration Pack||Subscription||per User and per Server|
|Firewall Integration Pack||Subscription||per User and per Server|
|Network Integration Pack||Subscription||per User and per Server|
|Central Data Storage 1-year Pack||Subscription||per User and per Server||Available to customers with Central Intercept X Advanced with XDR license (User and Server). Only data sent to Sophos Data Lake from Sophos XDR-enabled products and from Integration Pack(s) are in scope. Central alert, report, threat graph, and audit data are not in scope. Licensed based on combined number of Users and Servers.|
|Sophos Factory||Licensing Model||Applicable Unit||Notes and Exceptions|
|Sophos Factory Pro||Subscription||per credit||Credits reset monthly.|
|Sophos Factory Enterprise||Subscription||per credit||Credits reset monthly.|
Amazon Web ServicesTM, AWSTM, GCPTM, Google Cloud PlatformTM, KubernetesTM, MicrosoftTM, and Microsoft AzureTM are property of their respective owners. Third-party company, product, and service names are used for identification purposes only, and do not imply endorsement.
Updated: 23 August 2023