Skip to Content
HIPAA - Banner with Media - Background

Licensing Guidelines

This document forms part of the Sophos End User License Agreement and Sophos Services Agreement available at  https://www.sophos.com/en-us/legal, or other written agreement governing access and use of Sophos Licensed Products and Services. Capitalized terms not separately defined in these Licensing Guidelines have the same meanings as in the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement, as applicable.

Sophos Licensed Products and Services are licensed or made available by the applicable units specified in the table below. The Schedule issued by Sophos specifies the number of applicable units that the Licensee or Customer has ordered for each Licensed Product or Service (the “License Entitlement” or “Service Entitlement”, as applicable).

Sophos reserves the right to change or update these Licensing Guidelines in accordance with the terms of the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement governing access and use of Sophos Licensed Products and Services.

The following definitions apply to the table below:

Definitions for Licensed Products and Managed Services

1.'Computer' means any device or computing environment which benefits from the Licensed Product (for example, but without limitation, workstations, personal computers, laptops, netbooks, tablets, smartphones, and environments connected to an email server, an internet proxy or a gateway device, or a database) or which benefits from the Service. The Licensed Product does not have to be physically installed on the computer environment to provide benefit, nor is there a requirement for the computing hardware to be owned by the Licensee. The term Computer as defined herein includes, without limitation, non-persistent deployments, electronic devices that are capable of retrieving data, and virtual machines.

2. 'Server' means a Computer (i) upon which the Licensed Product is installed or (ii) which benefits from the Service, AND from which other Computers receive or retrieve data. If the data is solely generated by the Licensed Product, then the Computer is not considered a Server.

3. 'User' means an employee, consultant or other individual who benefits from the Licensed Product or Service.
NOTE: The Product does not have to be physically installed on the User's computer environment in order to provide benefit to the User.

Definitions for Cloud Services

1.'Cloud Asset' means a single virtual machine instance (including any server instance or database instance) or container image, within a Cloud Environment that benefits from, or whose configuration is accessed by, the Service. For the purposes of this definition, ‘Cloud Environment’ means an environment facilitating or involved in the delivery of computing services over the internet, including but not limited to Amazon Web Services (AWS) accounts, Microsoft Azure subscriptions, Google Cloud Platform (GCP) projects, Kubernetes clusters, development code repositories, and container registries.

Terms for Licensed Products and Managed Services

General exception for Education, Health and Government Entities:

If Licensee or Customer is an educational, health or government entity, Products or Services that are usually licensed or made available on a per User basis may alternatively, at Sophos’ option, be licensed or made available on a per Computer basis, or for email Products only, on a per mailbox basis. If a bundle includes both email and non-email Products, the aforementioned licenses must be the higher of the entity’s Computer and mailbox count. If Licensee subsequently transfers such Products or Services to an entity that does not fall within the education, health or government sector then the License Entitlement or Service Entitlement shall revert to calculation on a per User basis.

Number of Computers (Devices) per User:

In the case of Products licensed or Services made available by User, each User may use a reasonable number of Computers unless a specific cap on Computers per User is stated in the table below. Sophos reserves the right to apply a cap on Computers where usage is deemed unreasonable.

TRIAL/EVALUATION LICENSES

Where permitted, the Licensee or Customer may request a "trial" license or subscription of a commercially available Product or Service for evaluation purposes. In some cases, "evaluation" licenses or subscriptions may be generated automatically by Sophos, in its sole discretion, for Licensees or Customers of Sophos Central Endpoint Protection and Server Protection Products; for example, in order to enable testing of pre-release features and Products, and/or for applicable temporary license or subscription extensions.

All such trial/evaluation licenses and subscriptions, whether or not they are labelled as such, are governed by the terms of the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement (as applicable) relating to trials/evaluations; are provided for temporary usage only; and may be used for no longer than thirty (30) days unless otherwise specified by Sophos in writing. Note: a non-applicable date of "December 31, 2999" may be displayed in the Sophos Central console for evaluation licenses or subscriptions that are generated by Sophos.

Licensed ProductLicensing ModelApplicable UnitNOTES/EXCEPTIONS AND APPLICABLE LIMITS
Sophos Central Products
Cloud Optix AdvancedSubscriptionCloud AssetsA subscription includes a maximum number of Cloud Assets.

To enable Data Lake uploads for Sophos XDR with Cloud Optix Advanced, a Central Intercept X Advanced with XDR or Central Intercept X Advanced for Server with XDR license is required.

The following limitations apply to data uploaded from Sophos Cloud Optix to the Data Lake:

  • 1MB daily storage per Cloud Asset with a maximum 30 days storage
Cloud Optix StandardSubscriptionCloud AssetsEntitlement is included with Central Intercept X Advanced for Server. Not available for standalone purchase.

Includes a maximum number of Cloud Assets at 120% of your Central Intercept X Advanced for Server license entitlement.
Central Intercept X Advanced for Server with XDRSubscriptionper ServerFollowing Data Lake usage limitations apply:

  • 40MB daily storage with a maximum 30 days storage per subscription; and

  • 1,000 daily Data Lake API queries against 50x the amount of expected stored data per customer account.


Includes entitlement to Cloud Optix Standard.
Central Intercept X Advanced for ServerSubscriptionper ServerIncludes entitlement to Cloud Optix Standard.
Central Server ProtectionSubscriptionper ServerN/A
Central Intercept X Advanced with XDRSubscriptionper UserFollowing Data Lake usage limitations apply:

  • 20MB daily storage with a maximum 30 days storage per subscription; and

  • 1,000 daily Data Lake API queries against 50x the amount of expected stored data per customer account.
Central Intercept X AdvancedSubscriptionper UserN/A
Central Endpoint Intercept XSubscriptionper UserN/A
Central Intercept X EssentialsSubscriptionper UserN/A
Central Endpoint ProtectionSubscriptionper UserN/A
Central XDR (Extended Detection and Response)Subscriptionper User / ServerFollowing Data Lake usage limitations apply:

  • Maximum 30 days of data stored

  • 1,000 daily Data Lake API queries against 50x the amount of expected stored data per customer account.
Central Mobile AdvancedSubscriptionper UserMaximum upload size: 25 MB for documents, 300 MB for apps
Central Mobile StandardSubscriptionper UserMaximum upload size: 25 MB for documents, 300 MB for apps
Intercept X for MobileSubscriptionper UserN/A
Central Device EncryptionSubscriptionper UserN/A
Central WirelessSubscriptionper Access PointN/A
Central Email StandardSubscriptionper UserN/A
Central Email AdvancedSubscriptionper UserN/A
Portal Encryption Add-OnSubscriptionper UserOnly available as an add-on for Central Email Advanced.
Central Web Gateway AdvancedSubscriptionper UserN/A
Reflexion Total ControlSubscriptionper UserN/A
RADARSubscriptionper UserN/A
RADAR LITESubscriptionper UserN/A
RTC EncryptSubscriptionper UserN/A
Email Products
PureMessageSubscriptionper UserN/A
Email Protection AdvancedSubscriptionper UserN/A
Sophos Central Email StandardSubscriptionper UserN/A
RADARSubscriptionper UserN/A
RADAR LITESubscriptionper UserN/A
RTC EncryptSubscriptionper UserN/A
Reflexion Total ControlSubscriptionper UserN/A
Gateway Protection SuiteSubscriptionper UserN/A
Endpoint and End User Protection Products (Sophos Enterprise Console and standalone)
Endpoint Protection StandardSubscriptionper User / ServerFor end customers in Japan, each Server on which the Licensed Product is installed requires a Server license.
In all other countries, User licenses may be used for both Users and Servers, and each Server consumes one User license.
Endpoint Protection AdvancedSubscriptionper User / Server
Enduser Protection (including all Enduser bundles and suites)Subscriptionper User / Server
Complete Protection SuiteSubscriptionper User / Server
Web Protection SuiteSubscriptionper User / Server
Data Protection SuiteSubscriptionper User / Server
Endpoint Protection - BusinessSubscriptionper User / Server
Sophos for VDISubscriptionper virtual desktopApplies to Sophos for Virtual Environments product only
Web Products
Web Protection AdvancedSubscriptionper UserN/A
Sandstorm for Web Protection AdvancedSubscriptionper UserN/A
Gateway Protection SuiteSubscriptionper UserN/A
Sophos Phish ThreatSubscriptionper UserEach user who is sent mail from Phish Threat is considered to benefits from the product and requires a User license.
Server and Groupware Products (Sophos Enterprise Console and standalone)
PureMessageSubscriptionper ServerN/A
Server Protection EnterpriseSubscriptionper ServerN/A
Server Protection for Virtualization, Windows, and LinuxSubscriptionper ServerN/A
Sophos for Microsoft SharepointSubscriptionper UserPer Server licensing is also available
Central Intercept X Advanced for ServerSubscriptionper ServerN/A
Central Intercept X Essentials for ServerSubscriptionper ServerN/A
Central Server ProtectionSubscriptionper ServerN/A
Sophos for Network StorageSubscriptionper UserN/A
SAV InterfaceSubscriptionper UserPer Server licensing is also available
Safeguard Encryption Products
Safeguard Enterprise EncryptionSubscriptionper UserPerpetual per Computer option is also available
Safeguard Disk Encryption AdvancedSubscriptionper UserN/A
Smart Cards in EncryptionSubscriptionper UserN/A
Safeguard File Encryption AdvancedSubscriptionper UserN/A
Safeguard File Encryption StandardSubscriptionper UserN/A
Safeguard Device EncryptionPerpetualper ComputerN/A
Safeguard Data ExchangePerpetualper ComputerN/A
Safeguard Encryption for Cloud StoragePerpetualper ComputerN/A
Safeguard Encryption for File SharesPerpetualper ComputerN/A
Safeguard File Encryption for MacPerpetualper ComputerN/A
Safeguard Native Device EncryptionPerpetualper ComputerN/A
Safeguard Enterprise MiddlewarePerpetualper ComputerN/A
Safeguard EasyPerpetualper ComputerN/A
Safeguard Disc Encryption for MacPerpetualper ComputerN/A
Sophos Mobile Products
Sophos Mobile AdvancedSubscriptionper UserN/A
Sophos Mobile StandardSubscriptionper UserN/A
Sophos Mobile as a Service AdvancedSubscriptionper UserMaximum upload size: 25 MB for documents, 100 MB for apps
Sophos Mobile as a Service StandardSubscriptionper UserMaximum upload size: 25 MB for documents, 100 MB for apps
UTM and Sophos Firewall purchased on hardware appliance
FullGuardSubscriptionper hardware appliance 
EnterpriseGuardSubscriptionper hardware appliance 
Network ProtectionSubscriptionper hardware appliance 
Web ProtectionSubscriptionper hardware appliance 
Email ProtectionSubscriptionper hardware appliance 
Wireless ProtectionSubscriptionper UTM appliance 
Webserver ProtectionSubscriptionper hardware appliance 
Sandstorm (for UTM)Subscriptionper hardware appliance 
Zero-Day Protection (for Sophos Firewall)Subscriptionper hardware appliance 
BasicGuardSubscriptionper hardware appliance 
Xstream ProtectionSubscriptionper hardware appliance 
Standard ProtectionSubscriptionper hardware appliance 
Central OrchestrationSubscriptionper hardware appliance 
UTM Virtual Software
FullGuardSubscriptionper UserWhen a User communicates with or through the gateway (including without limitation DNS and DHCP queries to the gateway and communications both to the Internet and a different LAN segment), their IP address is added to list of licensed devices in the gateway’s local database. If several Users communicate through a single device then every User is counted as a separate User. If an IP address has not been used in the last seven (7) days, it is removed from the database.
Network ProtectionSubscriptionper User
Web ProtectionSubscriptionper User
Email ProtectionSubscriptionper User
Wireless ProtectionSubscriptionper User
SandstormSubscriptionper User
Webserver ProtectionSubscriptionper User
Sophos Firewall Virtual Software
Base LicensePerpetualper virtual ComputerSelection of licenses by number of CPU cores and amount of memory is available
FullGuardSubscriptionper virtual Computer
EnterpriseGuardSubscriptionper virtual Computer
Network ProtectionSubscriptionper virtual Computer
Web ProtectionSubscriptionper virtual Computer
Email ProtectionSubscriptionper virtual Computer
Webserver ProtectionSubscriptionper virtual Computer
MTR SF SW/Virtual Network SensorSubscriptionper virtual ComputerN/A
Xstream ProtectionSubscriptionper virtual Computer 
Standard ProtectionSubscriptionper virtual Computer 
Central OrchestrationSubscriptionper virtual Computer 
Zero-Day ProtectionSubscriptionper virtual Computer 
Sophos Central Firewall Reporting
Central Firewall ReportingSubscriptionGB storage capacity per Hardware appliance or per virtual Computer

A subscription includes a maximum number reports generated per Hardware appliance or per virtual Computer as follows:


Report time rangeReports generated per month
Last 24 hours2000
Last 7 days1000
Last 30 days200
Last 90 days80
90 days-1 year20
Other UTM Products
UTM Endpoint ProtectionSubscriptionper UserSold in license packs
Consumer Products
Sophos HomeFreePer User accountMaximum 10 Computers per User account. Product is licensed for personal and non-commercial use only.