Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=DNS-protection-licenses-FAQs

Frequently asked questions (FAQs)

Find answers to common questions about DNS Protection licenses.

General

What happens when my DNS Protection license expires?
  • Your DNS Protection license will expire at the same time as your Xstream Protection license.
  • For a purchased license, you will get a 30-day grace period after the license expires. This allows you to continue using the product in Sophos Central and allows DNS Protection to continue responding to DNS requests from your locations.
  • For a trial license, there's a grace period of 1 day.
  • If you have multiple firewalls with DNS Protection licenses in your account, the expiry and grace period only take effect when the last firewall's license expires.
I have purchased Sophos Firewall through a Managed Service Provider (MSP) on a flex license plan. What happens if I cancel the plan?

When your MSP removes the firewall from your Sophos Central account, you'll lose access to DNS Protection within one day. There's no grace period in this situation.

What happens if I transfer my firewalls to another Sophos Central account?
  • If you transfer all your licensed firewalls to another account, DNS Protection will no longer be available in the original account. There's no grace period for transferred licenses.
  • If you transfer some firewalls to another account but retain at least one firewall with DNS Protection in the original account, DNS Protection will still be available in the original account.
What happens if I have two firewalls, one with a purchased license and one with a trial license?
  • You'll be able to use DNS Protection as long as at least one of the licenses hasn't expired.
  • If both licenses expire, the grace period will last for 30 days from the end of the purchased license or one day from the end of the trial license.
I have a firewall with an airgap license. Can I use DNS Protection?

No, DNS Protection requires that your firewall is managed by or activated in Sophos Central. It doesn't support airgap licenses at this time.

Early access program (EAP)

When does the DNS Protection EAP end?

It ends on September 30, 2024.

What happens when the DNS Protection EAP ends?
  • If you have a firewall with a valid DNS Protection license registered to your account, DNS Protection will continue working for you after the EAP ends.

  • If you don't have a firewall with a valid DNS Protection license, here is what will happen when the EAP ends:

    • Sophos Central: You'll immediately lose access to the DNS Protection product UI. There's no grace period.
    • DNS requests: The DNS resolver service will stop responding to queries from your locations within 24 hours after the EAP ends.

  • If you have a valid DNS Protection license and want to confirm that your use of DNS Protection won't be impacted when the EAP ends, we recommend you try leaving the EAP before the end date. Contact Sophos Support if you experience any issues.