Description
Sophos ZTNA is now part of Sophos Workspace Protection
Sophos ZTNA is no longer sold as a standalone product. It is now one of four components inside Sophos Workspace Protection, which went generally available on February 26, 2026. If you came here looking for ZTNA licensing, Workspace Protection is what you order.
Standalone ZTNA term SKUs stopped being orderable in late April 2026, and the term transition completed on May 1, 2026. Existing customers were upgraded automatically on February 28, 2026 and keep the new capabilities for the rest of their term at no extra cost. Renewals quote as Workspace Protection.
What replaced it
Sophos Workspace Protection bundles four integrated components, managed from Sophos Fusion:
- Sophos Protected Browser, a hardened Chromium browser that embeds ZTNA, DNS protection and local data controls.
- Sophos ZTNA, the same per-application access that makes private applications invisible to the internet.
- Sophos DNS Protection for endpoints, web protection across all apps, ports and protocols.
- Sophos Email Monitoring System, added visibility against advanced email threats.
The components are modular, so you deploy only what a given user needs.
The licensing rule that catches people out
Workspace Protection is licensed per user, counted on the highest user count across Protected Browser, ZTNA or DNS Protection. Email Monitoring System is excluded from the count. In practice that means if you want the full bundle for 50 workers but DNS Protection for 100, you buy 100 licenses, not 50 plus a partial. Work out your largest single component count first and quote from that.
Frequently asked questions
Can I still buy Sophos ZTNA on its own?
No. Standalone Sophos ZTNA term SKUs could no longer be ordered from late April 2026, and the term transition completed on May 1, 2026. New and renewal orders are placed as Sophos Workspace Protection.
What happened to my existing ZTNA licenses?
Existing term and MSP Flex customers were automatically upgraded to the full Workspace Protection bundle from February 28, 2026, at no extra cost for the remainder of the license term. At renewal the quote becomes Workspace Protection, and a price change may apply either way.
What else is in Workspace Protection besides ZTNA?
Sophos Protected Browser, the Protected Browser Extension, Sophos DNS Protection for endpoints, and the Sophos Email Monitoring System. All four are managed through Sophos Fusion, and the components are modular so you deploy what you need.
How is Workspace Protection licensed?
Per user, based on the highest user count across Protected Browser, ZTNA or DNS Protection. Email Monitoring System does not count toward the total. So 50 users needing full Workspace Protection but 100 needing DNS Protection still requires 100 licenses.
Do I need another Sophos product to buy it?
No. Workspace Protection is available standalone or as an add-on to any other Sophos product. There is a bundle with Sophos Endpoint that simplifies quoting if you want both.
Moving from ZTNA to Workspace Protection
Nuformat is a Sophos partner serving Canada and the United States. Send us your current ZTNA user count and renewal date and we will quote the Workspace Protection equivalent, including whether the price moves up or down for your band.
Request a quoteTransition dates and licensing rules as published by Sophos. Pricing confirmed by Nuformat at the time of quotation.