Specification
Network Detection and Response (NDR) virtual appliance
Monitors network traffic for suspicious flows and malicious behavior
Licenses 500-999 users and servers
36-month renewal term
Educational pricing tier
Detects lateral movement, malware C2, rogue devices, and suspicious encrypted traffic
Integrates with Sophos Central management console
Available as virtual appliance on VMware or Hyper-V, cloud (AWS), or certified hardware
Supports multiple NDR sensors with no per-instance cost
