How to replace trial with purchased license?

Hello Boon HongWong 

What did you trial, and what did you purchase? Licenses used are also based on the features that are enabled in your Threat Protection policy.

For example - if you bought Central Server protection, and only trialed Intercept X Advanced for server, you need to disable all Intercerpt X Advanced for Server options, and only enable Server Protection Default settings, and save your policy. Allow some time for all servers to pick up the change to the policy, and the license count should correct itself.

I have already disable features that used EDR 2 days ago and the license is still using the trial after 2 days. And the license is already expired today.

Hi Boon HongWong 

From the start day of that license, endpoints agents will be automatically updated to the new license if it is activated. Under Licensing Tab, are you able to view your renewed license? Would you please PM me the case number that you have already registered with Support? 

Yes, I'm able to see the new full license and the trial license. The server has remained at the trial license even after we uninstall and reinstall. I have PM you the case number and my license details.

Hello,

The features you highlighted are included in the Intercept X for Server license; Deep Learning and Threat Case creation, you should re enable those.

To stop using the trial you should disable the feature

'Allow servers to send data on suspicious files, network events and admin tool activity to Sophos Central'

Regards,

Stephen

Hello,

The features you highlighted are included in the Intercept X for Server license; Deep Learning and Threat Case creation, you should re enable those.

To stop using the trial you should disable the feature

'Allow servers to send data on suspicious files, network events and admin tool activity to Sophos Central'

Regards,

Stephen

I was told that these two features need EDR license. Since our full license has them, why didn't it switch over to our full license when we purchase and activated them?

And what's the diff between licenses with and without EDR then?

Hi Stephen,

I cannot find this:

'Allow servers to send data on suspicious files, network events and admin tool activity to Sophos Central'

Where is this located?

So only the 4 blue highlighted features shown above need EDR right?

btw, can advise the recommended features to enable and disable for RDS?

Hi Boon HongWong 

EDR provides Threat Searches which can be used to search for potential threats on your network. Kindly refer to this document for more information. Please check this article to disable/enable EDR feed. 

Thanks! Under my policies, the Remediation only has one checkbox, not 3 as shown in the article. Does this mean automatically clean up malware is not a feature we have too?

Hi Boon HongWong 

You will find that feature under the same policy, Server Protection default Settings>Remediation. For EDR, you will have the option 'Allow servers to send data on suspicious files, network events and admin tool activity to Sophos Central' as stated in the article. 

If you see my screen capture shown at my earlier replies, there is no such options:

/cfs-file/__key/communityserver-discussions-components-files/10/1778.png

Hi Boon HongWong 

I have attached the screenshot for your reference, please check if you are able to view the option. I have the same license "Intercept X advance for Server" applied as you have purchased. 

Yes, there is only one checkbox under Remediation, not 3 as shown for the EDR article. So I can't possibly activated EDR isn't it?

Hi Boon HongWong 

Yes, You would not be able to activate EDR without that option.