DNS Protection licenses

To use DNS protection, you must have one of the following licenses:

• Xstream Protection: Includes only the standalone DNS Protection capabilities and doesn't include Sophos Endpoint. This license is Sophos Firewall's Xstream Protection subscription.
• Workspace Protection: Includes Sophos DNS Protection for endpoints. This license is based on the number of devices using DNS Protection.

Both licenses include the DNS over HTTPS feature.

This page describes the license details if you have Sophos Firewall's Xstream Protection subscription. For Workspace Protection license details, see Workspace Protection licenses.

You can check whether your firewall has a DNS Protection license in one of the following ways:

• In Sophos Firewall, go to Administration > Licensing.
• In Sophos Fusion, go to the Firewall Licensing page.

For DNS Protection to appear as a product in Sophos Fusion, you must link your licensed firewall to your Sophos Fusion account. You can do this in one of the following ways:

• Register your firewall using your Sophos Fusion account when you install it. See Set up a new firewall with Sophos Fusion.
• Claim your firewall's serial number under Firewall Licensing in Sophos Fusion. See Claim a firewall.
• Register your firewall for Sophos Fusion firewall management from your firewall's web admin console. See Enable Sophos Fusion management of Sophos Firewall.