Sophos Intercept X Advanced for Server with XDR.
Server protection with threat hunting.
Your servers hold the data attackers want most. Intercept X Advanced for Server with XDR pairs deep
learning malware detection, exploit prevention, and CryptoGuard anti-ransomware with cross-product threat
hunting, so you can stop attacks and trace exactly how they started.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
Intercept X for Server with XDR at a Glance
Threat Prevention
Deep learning anti-malware, exploit prevention, and active adversary mitigation work together to stop
attacks before they run, including threats that slip past traditional tools.
Anti-Ransomware
CryptoGuard detects malicious encryption and rolls affected files back automatically.
WipeGuard protects the master boot record from wipe and boot-record attacks.
Server Controls
Server Lockdown allow-lists the applications your server is meant to run, and File
Integrity Monitoring flags unexpected changes to critical files.
XDR & Investigation
Correlate detections across endpoint, server, firewall, and email, then hunt for active adversaries and
use root cause analysis to see what happened and where it started.
Not sure which Intercept X edition you need?
Intercept X comes in editions for servers and for workstations, with and without XDR. If you are still
weighing which one fits, head to the main Intercept X page to see every edition in one place and match the
right protection to what you are securing.
Per server. You buy one license for each server you want to protect. That is the key
difference from the workstation product, Intercept X for Endpoint, which is licensed per user. If you
are covering servers, count servers, not people.
One server license per virtual machine. Each Windows or Linux VM you protect counts
as a server, whether it runs in your data center, in AWS, or in Azure. So 24 Azure VMs need 24
licenses. The tier you see (1 to 9 servers, 10 to 24, and up) just sets the per-license price. You buy
a quantity equal to your server count, not one license that covers a range.
You keep every protection feature, including deep learning anti-malware, exploit
prevention, CryptoGuard, and Server Lockdown. XDR adds the investigation layer on top. It pulls
detection data from your endpoints, servers, firewall, and email into one place so you can hunt for
active threats, answer the hard questions after an incident, and trace an attack back to its root
cause across products, not just on a single server.
XDR is the toolset your own team uses to detect, investigate, and respond. MDR,
Managed Detection and Response, is a service where the Sophos team does that hunting and response for
you, around the clock. If you have the staff and want the controls, XDR fits. If you would rather hand
off 24/7 monitoring, ask us about adding MDR. We can quote either.
Windows Server and the common Linux distributions, running on physical servers,
virtual servers, or cloud workloads in AWS and Azure. Everything is managed from Sophos Central, so
on-premises and cloud servers sit under one console. Older platforms such as Windows Server 2008 R2
can be covered with an Extended Support license.
Yes. Renewals run on the same per-server model, and you can add servers mid-term as
your environment grows. If your subscription has lapsed or you are not sure what you currently own,
send us your order number or Sophos license ID and we will confirm what you have and line up the right
renewal.
Talk to a Sophos-certified expert
Not sure how many server licenses you need, or whether XDR or MDR is the right level? We are a Sophos
Platinum Partner. We'll size it correctly, flag anything you don't need, and get you a quote the same day.
