Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=active-threat-response-licenses

Licenses for threat feed modules

The threat feed modules under Active threat response have specific firewall license requirements. Additionally, modules such as MDR threat feeds require licenses from Sophos Central.

Required licenses for threat feeds

See the following table for the license requirements:

Threat feed module Sophos Firewall licenses Sophos Central licenses
MDR threat feeds Xstream Protection bundle

Sophos MDR Essentials

or Sophos MDR Complete license

See Activate your license.
Sophos X-Ops threat feeds Network Protection license None

Note

For Sophos X-Ops, we recommend that you buy the Standard or Xstream bundle license. These bundles include the Web Protection license required to implement threat feeds. Alternatively, take the Web Protection license and the Network Protection license.

Licenses for additional protection

To implement Synchronized Security, you need an Intercept X license in Sophos Central. For more information, contact your Sophos partner.

More resources