Does Network Protection include user identity?

Question

I have a Network Protection subscription. 
 When creating User / Network Rule I can choose to Match known users in the identity section so that I apply the traffic shaping rules for users.

But this option has no effect and the user can access the internet without authentication and does not get the captive portal to login. 
 When I checked the datasheet of XG I see that the user viability and traffic shaping QoS are in the Web protection and there is nothing mentioned in the Network Protection about User Identity.

Does Network Protection include user identity feature (i.e. I can create a User Rule that take effect) or I should also get the Web Protection subscription?

sachingurung · Accepted Answer

Hi Ahmed, 
 You need to buy Web Protection module subscription. You can refer the link here to learn about the licensing in Sophos. 
 Thanks