Licensing Guidelines - 8 December 2021

This document forms part of the Sophos End User License Agreement and Sophos Services Agreement available at https://www.sophos.com/en-us/legal, or other written agreement governing access and use of Sophos Licensed Products and Services. Capitalized terms not separately defined in these Licensing Guidelines have the same meanings as in the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement, as applicable.

Sophos Licensed Products and Services are licensed or made available by the applicable units specified in the table below. The Schedule issued by Sophos specifies the number of applicable units that the Licensee or Customer has ordered for each Licensed Product or Service (the “License Entitlement” or “Service Entitlement”, as applicable).

Sophos reserves the right to change or update these Licensing Guidelines in accordance with the terms of the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement governing access and use of Sophos Licensed Products and Services.

The following definitions apply to the table below:

Definitions for Licensed Products and Managed Services

1.'Computer' means any device or computing environment which benefits from the Licensed Product (for example, but without limitation, workstations, personal computers, laptops, netbooks, tablets, smartphones, and environments connected to an email server, an internet proxy or a gateway device, or a database) or which benefits from the Service. The Licensed Product does not have to be physically installed on the computer environment to provide benefit, nor is there a requirement for the computing hardware to be owned by the Licensee. The term Computer as defined herein includes, without limitation, non-persistent deployments, electronic devices that are capable of retrieving data, and virtual machines.

2. 'Server' means a Computer (i) upon which the Licensed Product is installed or (ii) which benefits from the Service, wherein the Computer provides at least one application, client service, or capability.

3. 'User' means an employee, consultant or other individual who benefits from the Licensed Product or Service.
NOTE: The Product does not have to be physically installed on the User's computer environment in order to provide benefit to the User.

Definitions for Cloud Services

1.'Cloud Asset' means a single virtual machine instance (including any server instance or database instance) or container image, within a Cloud Environment that benefits from, or whose configuration is accessed by, the Service. For the purposes of this definition, ‘Cloud Environment’ means an environment facilitating or involved in the delivery of computing services over the internet, including but not limited to Amazon Web Services (AWS) accounts, Microsoft Azure subscriptions, Google Cloud Platform (GCP) projects, Kubernetes clusters, development code repositories, and container registries.

Terms for Licensed Products and Managed Services

General exception for Education, Health and Government Entities:

If Licensee or Customer is an educational, health or government entity, Products or Services that are usually licensed or made available on a per User basis may alternatively, at Sophos’ option, be licensed or made available on a per Computer basis, or for email Products only, on a per mailbox basis. If a bundle includes both email and non-email Products, the aforementioned licenses must be the higher of the entity’s Computer and mailbox count. If Licensee subsequently transfers such Products or Services to an entity that does not fall within the education, health or government sector then the License Entitlement or Service Entitlement shall revert to calculation on a per User basis.

Number of Computers (Devices) per User:

In the case of Products licensed or Services made available by User, each User may use a reasonable number of Computers unless a specific cap on Computers per User is stated in the table below. Sophos reserves the right to apply a cap on Computers where usage is deemed unreasonable.

TRIAL/EVALUATION LICENSES

Where permitted, the Licensee or Customer may request a "trial" license or subscription of a commercially available Product or Service for evaluation purposes. In some cases, "evaluation" licenses or subscriptions may be generated automatically by Sophos, in its sole discretion, for Licensees or Customers of Sophos Central Endpoint Protection and Server Protection Products; for example, in order to enable testing of pre-release features and Products, and/or for applicable temporary license or subscription extensions.

All such trial/evaluation licenses and subscriptions, whether or not they are labelled as such, are governed by the terms of the Sophos End User License Agreement, Sophos Services Agreement, or other written agreement (as applicable) relating to trials/evaluations; are provided for temporary usage only; and may be used for no longer than thirty (30) days unless otherwise specified by Sophos in writing. Note: a non-applicable date of "December 31, 2999" may be displayed in the Sophos Central console for evaluation licenses or subscriptions that are generated by Sophos.

Licensed Product

Licensing Model

Applicable Unit

NOTES.EXCEPTIONS AND APPLICABLE LIMITS

Sophos Central Products

Cloud Optix Advanced

Subscription

Cloud Assets

A subscription includes a maximum number of Cloud Assets.

The following Data Lake use limitations apply:

1MB daily storage per Cloud Asset with a maximum 30 days storage

Cloud Optix Standard

Subscription

Cloud Assets

Entitlement is included with Central Intercept X Advanced for Server. Not available for standalone purchase.

Includes a maximum number of Cloud Assets at 120% of your Central Intercept X Advanced for Server license entitlement.

Central Intercept X Advanced for Server with XDR

Subscription

per Server

Following Data Lake usage limitations apply:

40MB daily storage with a maximum 30 days storage per subscription; and
1,000 daily Data Lake API queries against 50x the amount of expected stored data per customer account.

Includes entitlement to Cloud Optix Standard.

Central Intercept X Advanced for Server

Subscription

per Server

Includes entitlement to Cloud Optix Standard.

Central Server Protection

Subscription

per Server

N/A

Sophos Capsule8 Protect

Subscription

per Server

N/A

Sophos Capsule8 Protect+

Subscription

per Server

N/A

Sophos Capsule8 Complete

Subscription

per Server

N/A

Central Intercept X Advanced with XDR

Subscription

per User

Following Data Lake usage limitations apply:

20MB daily storage with a maximum 30 days storage per subscription; and
1,000 daily Data Lake API queries against 50x the amount of expected stored data per customer account.

Central Intercept X Advanced

Subscription

per User

N/A

Central Endpoint Intercept X

Subscription

per User

N/A

Central Intercept X Essentials

Subscription

per User

N/A

Central Endpoint Protection

Subscription

per User

N/A

Central XDR (Extended Detection and Response)

Subscription

per User / Server

Following Data Lake usage limitations apply:

Maximum 30 days of data stored
1,000 daily Data Lake API queries against 50x the amount of expected stored data per customer account.

Central Mobile Advanced

Subscription

per User

Maximum upload size: 25 MB for documents, 300 MB for apps

Central Mobile Standard

Subscription

per User

Maximum upload size: 25 MB for documents, 300 MB for apps

Intercept X for Mobile

Subscription

per User

N/A

Central Device Encryption

Subscription

per User

N/A

Central Email Standard

Subscription

per User

N/A

Central Email Advanced

Subscription

per User

N/A

Portal Encryption Add-On

Subscription

per User

Only available as an add-on for Central Email Advanced.

Central Web Gateway Advanced

Subscription

per User

N/A

Reflexion Total Control

Subscription

per User

N/A

RADAR

Subscription

per User

N/A

RADAR LITE

Subscription

per User

N/A

RTC Encrypt

Subscription

per User

N/A

Email Products

PureMessage

Subscription

per User

N/A

Email Protection Advanced

Subscription

per User

N/A

Sophos Central Email Standard

Subscription

per User

N/A

RADAR

Subscription

per User

N/A

RADAR LITE

Subscription

per User

N/A

RTC Encrypt

Subscription

per User

N/A

Reflexion Total Control

Subscription

per User

N/A

Gateway Protection Suite

Subscription

per User

N/A

Endpoint and End User Protection Products (Sophos Enterprise Console and standalone)

Endpoint Protection Standard

Subscription

per User / Server

For end customers in Japan, each Server on which the Licensed Product is installed requires a Server license.
In all other countries, User licenses may be used for both Users and Servers, and each Server consumes one User license.

Endpoint Protection Advanced

Subscription

per User / Server

Enduser Protection (including all Enduser bundles and suites)

Subscription

per User / Server

Complete Protection Suite

Subscription

per User / Server

Web Protection Suite

Subscription

per User / Server

Data Protection Suite

Subscription

per User / Server

Endpoint Protection - Business

Subscription

per User / Server

Sophos for VDI

Subscription

per virtual desktop

Applies to Sophos for Virtual Environments product only

Web Products

Web Protection Advanced

Subscription

per User

N/A

Sandstorm for Web Protection Advanced

Subscription

per User

N/A

Gateway Protection Suite

Subscription

per User

N/A

Sophos Phish Threat

Subscription

per User

Each user who is sent mail from Phish Threat is considered to benefits from the product and requires a User license.

Server and Groupware Products (Sophos Enterprise Console and standalone)

PureMessage

Subscription

per Server

N/A

Server Protection Enterprise

Subscription

per Server

N/A

Server Protection for Virtualization, Windows, and Linux

Subscription

per Server

N/A

Sophos for Microsoft Sharepoint

Subscription

per User

Per Server licensing is also available

Central Intercept X Advanced for Server

Subscription

per Server

N/A

Central Intercept X Essentials for Server

Subscription

per Server

N/A

Central Server Protection

Subscription

per Server

N/A

Sophos for Network Storage

Subscription

per User

N/A

SAV Interface

Subscription

per User

Per Server licensing is also available

Safeguard Encryption Products

Safeguard Enterprise Encryption

Subscription

per User

Perpetual per Computer option is also available

Safeguard Disk Encryption Advanced

Subscription

per User

N/A

Smart Cards in Encryption

Subscription

per User

N/A

Safeguard File Encryption Advanced

Subscription

per User

N/A

Safeguard File Encryption Standard

Subscription

per User

N/A

Safeguard Device Encryption

Perpetual

per Computer

N/A

Safeguard Data Exchange

Perpetual

per Computer

N/A

Safeguard Encryption for Cloud Storage

Perpetual

per Computer

N/A

Safeguard Encryption for File Shares

Perpetual

per Computer

N/A

Safeguard File Encryption for Mac

Perpetual

per Computer

N/A

Safeguard Native Device Encryption

Perpetual

per Computer

N/A

Safeguard Enterprise Middleware

Perpetual

per Computer

N/A

Safeguard Easy

Perpetual

per Computer

N/A

Safeguard Disc Encryption for Mac

Perpetual

per Computer

N/A

Sophos Mobile Products

Sophos Mobile Advanced

Subscription

per User

N/A

Sophos Mobile Standard

Subscription

per User

N/A

Sophos Mobile as a Service Advanced

Subscription

per User

Maximum upload size: 25 MB for documents, 100 MB for apps

Sophos Mobile as a Service Standard

Subscription

per User

Maximum upload size: 25 MB for documents, 100 MB for apps

UTM and Sophos Firewall purchased on hardware appliance

FullGuard

Subscription

per hardware appliance

EnterpriseGuard

Subscription

per hardware appliance

Network Protection

Subscription

per hardware appliance

Web Protection

Subscription

per hardware appliance

Email Protection

Subscription

per hardware appliance

Wireless Protection

Subscription

per UTM appliance

Webserver Protection

Subscription

per hardware appliance

Sandstorm (for UTM)

Subscription

per hardware appliance

Zero-Day Protection (for Sophos Firewall)

Subscription

per hardware appliance

BasicGuard

Subscription

per hardware appliance

Xstream Protection

Subscription

per hardware appliance

Standard Protection

Subscription

per hardware appliance

Central Orchestration

Subscription

per hardware appliance

UTM Virtual Software

FullGuard

Subscription

per User

When a User communicates with or through the gateway (including without limitation DNS and DHCP queries to the gateway and communications both to the Internet and a different LAN segment), their IP address is added to list of licensed devices in the gateway’s local database. If several Users communicate through a single device then every User is counted as a separate User. If an IP address has not been used in the last seven (7) days, it is removed from the database.

Network Protection

Subscription

per User

Web Protection

Subscription

per User

Email Protection

Subscription

per User

Wireless Protection

Subscription

per User

Sandstorm

Subscription

per User

Webserver Protection

Subscription

per User

Sophos Firewall Virtual Software

Base License

Perpetual

per virtual Computer

Selection of licenses by number of CPU cores and amount of memory is available

FullGuard

Subscription

per virtual Computer

EnterpriseGuard

Subscription

per virtual Computer

Network Protection

Subscription

per virtual Computer

Web Protection

Subscription

per virtual Computer

Email Protection

Subscription

per virtual Computer

Webserver Protection

Subscription

per virtual Computer

MTR SF SW/Virtual Network Sensor

Subscription

per virtual Computer

N/A

Xstream Protection

Subscription

per virtual Computer

Standard Protection

Subscription

per virtual Computer

Central Orchestration

Subscription

per virtual Computer

Zero-Day Protection

Subscription

per virtual Computer

Sophos Central Firewall Reporting

Central Firewall Reporting

Subscription

GB storage capacity per Hardware appliance or per virtual Computer

A subscription includes a maximum number reports generated per Hardware appliance or per virtual Computer as follows:

Report time range	Reports generated per month
Last 24 hours	2000
Last 7 days	1000
Last 30 days	200
Last 90 days	80
90 days-1 year	20