This document forms part of the Sophos End User License Agreement and Sophos Services Agreement available at https://www.sophos.com/en-us/legal, or other written agreement governing access and use of Sophos Licensed Products and Services. Capitalized terms not separately defined in these Licensing Guidelines have the same meanings as in the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement, as applicable.
Sophos Licensed Products and Services are licensed or made available by the applicable units specified in the table below. The Schedule issued by Sophos specifies the number of applicable units that the Licensee or Customer has ordered for each Licensed Product or Service (the “License Entitlement” or “Service Entitlement”, as applicable).
Sophos reserves the right to change or update these Licensing Guidelines in accordance with the terms of the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement governing access and use of Sophos Licensed Products and Services.
The following definitions apply to the table below:
Definitions for Licensed Products and Managed Services
1.'Computer' means any device or computing environment which benefits from the Licensed Product (for example, but without limitation, workstations, personal computers, laptops, netbooks, tablets, smartphones, and environments connected to an email server, an internet proxy or a gateway device, or a database) or which benefits from the Service. The Licensed Product does not have to be physically installed on the computer environment to provide benefit, nor is there a requirement for the computing hardware to be owned by the Licensee. The term Computer as defined herein includes, without limitation, non-persistent deployments, electronic devices that are capable of retrieving data, and virtual machines.
2. 'Server' means a Computer (i) upon which the Licensed Product is installed or (ii) which benefits from the Service, AND from which other Computers receive or retrieve data. If the data is solely generated by the Licensed Product, then the Computer is not considered a Server.
3. 'User' means an employee, consultant or other individual who benefits from the Licensed Product or Service.
NOTE: The Product does not have to be physically installed on the User's computer environment in order to provide benefit to the User.
Definitions for Cloud Services
1.'Cloud Asset' means a single virtual machine instance (including any server instance or database instance) or container image, within a Cloud Environment that benefits from, or whose configuration is accessed by, the Service. For the purposes of this definition, ‘Cloud Environment’ means an environment facilitating or involved in the delivery of computing services over the internet, including but not limited to Amazon Web Services (AWS) accounts, Microsoft Azure subscriptions, Google Cloud Platform (GCP) projects, Kubernetes clusters, development code repositories, and container registries.
Terms for Licensed Products and Managed Services
General exception for Education, Health and Government Entities:
If Licensee or Customer is an educational, health or government entity, Products or Services that are usually licensed or made available on a per User basis may alternatively, at Sophos’ option, be licensed or made available on a per Computer basis, or for email Products only, on a per mailbox basis. If a bundle includes both email and non-email Products, the aforementioned licenses must be the higher of the entity’s Computer and mailbox count. If Licensee subsequently transfers such Products or Services to an entity that does not fall within the education, health or government sector then the License Entitlement or Service Entitlement shall revert to calculation on a per User basis.
Number of Computers (Devices) per User:
In the case of Products licensed or Services made available by User, each User may use a reasonable number of Computers unless a specific cap on Computers per User is stated in the table below. Sophos reserves the right to apply a cap on Computers where usage is deemed unreasonable.
TRIAL/EVALUATION LICENSES
Where permitted, the Licensee or Customer may request a "trial" license or subscription of a commercially available Product or Service for evaluation purposes. In some cases, "evaluation" licenses or subscriptions may be generated automatically by Sophos, in its sole discretion, for Licensees or Customers of Sophos Central Endpoint Protection and Server Protection Products; for example, in order to enable testing of pre-release features and Products, and/or for applicable temporary license or subscription extensions.
All such trial/evaluation licenses and subscriptions, whether or not they are labelled as such, are governed by the terms of the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement (as applicable) relating to trials/evaluations; are provided for temporary usage only; and may be used for no longer than thirty (30) days unless otherwise specified by Sophos in writing. Note: a non-applicable date of "December 31, 2999" may be displayed in the Sophos Central console for evaluation licenses or subscriptions that are generated by Sophos.
|
Licensed Product |
Licensing Model |
Applicable Unit |
NOTES.EXCEPTIONS AND APPLICABLE LIMITS |
||||||||||||
|
Sophos Central Products |
|||||||||||||||
|
Cloud Optix Advanced |
Subscription |
Cloud Assets |
A subscription includes a maximum number of Cloud Assets. To enable Data Lake uploads for Sophos XDR with Cloud Optix Advanced, a Central Intercept X Advanced with XDR or Central Intercept X Advanced for Server with XDR license is required. The following limitations apply to data uploaded from Sophos Cloud Optix to the Data Lake:
|
||||||||||||
|
Cloud Optix Standard |
Subscription |
Cloud Assets |
Entitlement is included with Central Intercept X Advanced for Server. Not available for standalone purchase. Includes a maximum number of Cloud Assets at 120% of your Central Intercept X Advanced for Server license entitlement. |
||||||||||||
|
Central Intercept X Advanced for Server with XDR |
Subscription |
per Server |
Following Data Lake usage limitations apply:
Includes entitlement to Cloud Optix Standard. |
||||||||||||
|
Central Intercept X Advanced for Server |
Subscription |
per Server |
Includes entitlement to Cloud Optix Standard. |
||||||||||||
|
Central Server Protection |
Subscription |
per Server |
N/A |
||||||||||||
|
Central Intercept X Advanced with XDR |
Subscription |
per User |
Following Data Lake usage limitations apply:
|
||||||||||||
|
Central Intercept X Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Central Endpoint Intercept X |
Subscription |
per User |
N/A |
||||||||||||
|
Central Intercept X Essentials |
Subscription |
per User |
N/A |
||||||||||||
|
Central Endpoint Protection |
Subscription |
per User |
N/A |
||||||||||||
|
Central XDR (Extended Detection and Response) |
Subscription |
per User / Server |
Following Data Lake usage limitations apply:
|
||||||||||||
|
Central Mobile Advanced |
Subscription |
per User |
Maximum upload size: 25 MB for documents, 300 MB for apps |
||||||||||||
|
Central Mobile Standard |
Subscription |
per User |
Maximum upload size: 25 MB for documents, 300 MB for apps |
||||||||||||
|
Intercept X for Mobile |
Subscription |
per User |
N/A |
||||||||||||
|
Central Device Encryption |
Subscription |
per User |
N/A |
||||||||||||
|
Central Wireless |
Subscription |
per Access Point |
N/A |
||||||||||||
|
Central Email Standard |
Subscription |
per User |
N/A |
||||||||||||
|
Central Email Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Portal Encryption Add-On |
Subscription |
per User |
Only available as an add-on for Central Email Advanced. |
||||||||||||
|
Central Web Gateway Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Reflexion Total Control |
Subscription |
per User |
N/A |
||||||||||||
|
RADAR |
Subscription |
per User |
N/A |
||||||||||||
|
RADAR LITE |
Subscription |
per User |
N/A |
||||||||||||
|
RTC Encrypt |
Subscription |
per User |
N/A |
||||||||||||
|
Email Products |
|||||||||||||||
|
PureMessage |
Subscription |
per User |
N/A |
||||||||||||
|
Email Protection Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Sophos Central Email Standard |
Subscription |
per User |
N/A |
||||||||||||
|
RADAR |
Subscription |
per User |
N/A |
||||||||||||
|
RADAR LITE |
Subscription |
per User |
N/A |
||||||||||||
|
RTC Encrypt |
Subscription |
per User |
N/A |
||||||||||||
|
Reflexion Total Control |
Subscription |
per User |
N/A |
||||||||||||
|
Gateway Protection Suite |
Subscription |
per User |
N/A |
||||||||||||
|
Endpoint and End User Protection Products (Sophos Enterprise Console and standalone) |
|||||||||||||||
|
Endpoint Protection Standard |
Subscription |
per User / Server |
For end customers in Japan, each Server on which the Licensed Product is installed requires a Server license. |
||||||||||||
|
Endpoint Protection Advanced |
Subscription |
per User / Server |
|||||||||||||
|
Enduser Protection (including all Enduser bundles and suites) |
Subscription |
per User / Server |
|||||||||||||
|
Complete Protection Suite |
Subscription |
per User / Server |
|||||||||||||
|
Web Protection Suite |
Subscription |
per User / Server |
|||||||||||||
|
Data Protection Suite |
Subscription |
per User / Server |
|||||||||||||
|
Endpoint Protection - Business |
Subscription |
per User / Server |
|||||||||||||
|
Sophos for VDI |
Subscription |
per virtual desktop |
Applies to Sophos for Virtual Environments product only |
||||||||||||
|
Web Products |
|||||||||||||||
|
Web Protection Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Sandstorm for Web Protection Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Gateway Protection Suite |
Subscription |
per User |
N/A |
||||||||||||
|
Sophos Phish Threat |
Subscription |
per User |
Each user who is sent mail from Phish Threat is considered to benefits from the product and requires a User license. |
||||||||||||
|
Server and Groupware Products (Sophos Enterprise Console and standalone) |
|||||||||||||||
|
PureMessage |
Subscription |
per Server |
N/A |
||||||||||||
|
Server Protection Enterprise |
Subscription |
per Server |
N/A |
||||||||||||
|
Server Protection for Virtualization, Windows, and Linux |
Subscription |
per Server |
N/A |
||||||||||||
|
Sophos for Microsoft Sharepoint |
Subscription |
per User |
Per Server licensing is also available |
||||||||||||
|
Central Intercept X Advanced for Server |
Subscription |
per Server |
N/A |
||||||||||||
|
Central Intercept X Essentials for Server |
Subscription |
per Server |
N/A |
||||||||||||
|
Central Server Protection |
Subscription |
per Server |
N/A |
||||||||||||
|
Sophos for Network Storage |
Subscription |
per User |
N/A |
||||||||||||
|
SAV Interface |
Subscription |
per User |
Per Server licensing is also available |
||||||||||||
|
Safeguard Encryption Products |
|||||||||||||||
|
Safeguard Enterprise Encryption |
Subscription |
per User |
Perpetual per Computer option is also available |
||||||||||||
|
Safeguard Disk Encryption Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Smart Cards in Encryption |
Subscription |
per User |
N/A |
||||||||||||
|
Safeguard File Encryption Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Safeguard File Encryption Standard |
Subscription |
per User |
N/A |
||||||||||||
|
Safeguard Device Encryption |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Safeguard Data Exchange |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Safeguard Encryption for Cloud Storage |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Safeguard Encryption for File Shares |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Safeguard File Encryption for Mac |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Safeguard Native Device Encryption |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Safeguard Enterprise Middleware |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Safeguard Easy |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Safeguard Disc Encryption for Mac |
Perpetual |
per Computer |
N/A |
||||||||||||
|
Sophos Mobile Products |
|||||||||||||||
|
Sophos Mobile Advanced |
Subscription |
per User |
N/A |
||||||||||||
|
Sophos Mobile Standard |
Subscription |
per User |
N/A |
||||||||||||
|
Sophos Mobile as a Service Advanced |
Subscription |
per User |
Maximum upload size: 25 MB for documents, 100 MB for apps |
||||||||||||
|
Sophos Mobile as a Service Standard |
Subscription |
per User |
Maximum upload size: 25 MB for documents, 100 MB for apps |
||||||||||||
|
UTM and Sophos Firewall purchased on hardware appliance |
|||||||||||||||
|
FullGuard |
Subscription |
per hardware appliance |
|||||||||||||
|
EnterpriseGuard |
Subscription |
per hardware appliance |
|||||||||||||
|
Network Protection |
Subscription |
per hardware appliance |
|||||||||||||
|
Web Protection |
Subscription |
per hardware appliance |
|||||||||||||
|
Email Protection |
Subscription |
per hardware appliance |
|||||||||||||
|
Wireless Protection |
Subscription |
per UTM appliance |
|||||||||||||
|
Webserver Protection |
Subscription |
per hardware appliance |
|||||||||||||
|
Sandstorm (for UTM) |
Subscription |
per hardware appliance |
|||||||||||||
|
Zero-Day Protection (for Sophos Firewall) |
Subscription |
per hardware appliance |
|||||||||||||
|
BasicGuard |
Subscription |
per hardware appliance |
|||||||||||||
|
Xstream Protection |
Subscription |
per hardware appliance |
|||||||||||||
|
Standard Protection |
Subscription |
per hardware appliance |
|||||||||||||
|
Central Orchestration |
Subscription |
per hardware appliance |
|||||||||||||
|
UTM Virtual Software |
|||||||||||||||
|
FullGuard |
Subscription |
per User |
When a User communicates with or through the gateway (including without limitation DNS and DHCP queries to the gateway and communications both to the Internet and a different LAN segment), their IP address is added to list of licensed devices in the gateway’s local database. If several Users communicate through a single device then every User is counted as a separate User. If an IP address has not been used in the last seven (7) days, it is removed from the database. | ||||||||||||
|
Network Protection |
Subscription |
per User |
|||||||||||||
|
Web Protection |
Subscription |
per User |
|||||||||||||
|
Email Protection |
Subscription |
per User |
|||||||||||||
|
Wireless Protection |
Subscription |
per User |
|||||||||||||
|
Sandstorm |
Subscription |
per User |
|||||||||||||
|
Webserver Protection |
Subscription |
per User |
|||||||||||||
|
Sophos Firewall Virtual Software |
|||||||||||||||
|
Base License |
Perpetual |
per virtual Computer |
Selection of licenses by number of CPU cores and amount of memory is available |
||||||||||||
|
FullGuard |
Subscription |
per virtual Computer |
|||||||||||||
|
EnterpriseGuard |
Subscription |
per virtual Computer |
|||||||||||||
|
Network Protection |
Subscription |
per virtual Computer |
|||||||||||||
|
Web Protection |
Subscription |
per virtual Computer |
|||||||||||||
|
Email Protection |
Subscription |
per virtual Computer |
|||||||||||||
|
Webserver Protection |
Subscription |
per virtual Computer |
|||||||||||||
|
MTR SF SW/Virtual Network Sensor |
Subscription |
per virtual Computer |
N/A |
||||||||||||
|
Xstream Protection |
Subscription |
per virtual Computer |
|
||||||||||||
|
Standard Protection |
Subscription |
per virtual Computer |
|
||||||||||||
|
Central Orchestration |
Subscription |
per virtual Computer |
|
||||||||||||
|
Zero-Day Protection |
Subscription |
per virtual Computer |
|
||||||||||||
|
Sophos Central Firewall Reporting |
|||||||||||||||
|
Central Firewall Reporting |
Subscription |
GB storage capacity per Hardware appliance or per virtual Computer |
A subscription includes a maximum number reports generated per Hardware appliance or per virtual Computer as follows:
|
||||||||||||
|
Other UTM Products |
|||||||||||||||
|
UTM Endpoint Protection |
Subscription |
per User |
Sold in license packs |
||||||||||||
|
Consumer Products |
|||||||||||||||
|
Sophos Home |
Free |
Per User account |
Maximum 10 Computers per User account. Product is licensed for personal and non-commercial use only. |
||||||||||||
|
Managed Services |
Licensing Model |
Applicable Unit |
Notes and Exceptions |
|
Managed Threat Response Standard |
Subscription |
Per User |
One subscription includes 1 license to Central Intercept X Advanced with XDR |
|
Managed Threat Response Advanced |
Subscription |
Per User |
One subscription includes 1 license to Central Intercept X Advanced with XDR |
|
Managed Threat Response Standard |
Subscription |
Per Server |
One subscription includes 1 license to Central Intercept X Advanced for Server with XDR |
|
Managed Threat Response Advanced |
Subscription |
Per Server |
One subscription includes 1 license to Central Intercept X Advanced for Server with XDR |
|
Rapid Response |
Subscription |
Per User and Per Server |
One subscription includes 1 license to Central Intercept X Advanced with XDR endpoint or server |
|
Managed Threat Detection |
Subscription |
Per User |
N/A |
|
Managed Threat Detection |
Subscription |
Per Server |
N/A |
Amazon Web Services TM, AWS TM, GCP TM, Google Cloud Platform TM, Kubernetes TM, Microsoft TM, and Microsoft Azure TM are property of their respective owners. Third-party company, product, and service names are used for identification purposes only, and do not imply endorsement.