DNS Protection licenses

To use DNS protection, you must have one of the following licenses:

• Xstream Protection: Includes only the standalone DNS Protection capabilities and doesn't include Sophos Endpoint. This license is Sophos Firewall's Xstream Protection subscription.
• Workspace Protection: Includes Sophos DNS Protection for endpoints. This license is based on the number of devices using DNS Protection.

Both licenses include the DNS over HTTPS feature.

This page describes the license details if you have Sophos Firewall's Xstream Protection subscription. For Workspace Protection license details, see Workspace Protection licenses.

You can check whether your firewall has a DNS Protection license in one of the following ways:

• In Sophos Firewall, go to Administration > Licensing.
• In Sophos Central, go to the Firewall Licensing page.

For DNS Protection to appear as a product in Sophos Central, you must link your licensed firewall to your Sophos Central account. You can do this in one of the following ways:

• Register your firewall using your Sophos Central account when you install it. See Set up a new firewall with Sophos Central.
• Claim your firewall's serial number under Firewall Licensing in Sophos Central. See Claim a firewall.
• Register your firewall for Sophos Central firewall management from your firewall's web admin console. See Enable Sophos Central management of Sophos Firewall.