Freedom251 › Business VPN Software
Sophos ZTNA
by Sophos ZTNA
What Sophos ZTNA is
Sophos ZTNA controls user access to private applications, allowing users to reach only the applications they need while keeping those applications invisible to the outside world. Access policies can use device posture to block compromised devices, with posture information supplied through Sophos Security Heartbeat from Sophos Endpoint. Sophos positions the product as a replacement for legacy remote access VPN for remote and hybrid workers. Identity options include on-premises Microsoft Active Directory, Microsoft Entra ID, and Okta, and the product supports SSO and SCIM. Supported environments include Windows, macOS, web, VMware ESXi, Hyper-V, and Sophos Firewall. Gateways run on VMware ESXi 7+, Hyper-V 2016+, or Sophos Firewall; Sophos specifies up to 10,000 agent connections per node and up to 90,000 across a cluster of no more than nine nodes. Sophos Protected Browser integration includes RDP and SSH clients. ZTNA management is included in Sophos Fusion’s cloud console. Workspace Protection, which includes ZTNA, is licensed per user on a term or monthly through managed service providers, with pricing by quote. A no-obligation 30-day Workspace Protection trial is available.
Who it suits
It suits organizations managing remote or hybrid access to private applications with identity controls, device posture checks, and audit logs. Its gateway options are relevant to teams using VMware ESXi, Hyper-V, or Sophos Firewall.
What it does well
- Policies can block compromised devices.
- SSO and SCIM are supported.
- Audit logs and advanced administration are available.
- Protected Browser integration includes RDP and SSH clients.
- A 30-day Workspace Protection trial is offered.
What to know first
- Pricing is available by quote.
- Site-to-site networking is not supported.
- Gateway deployment requires a listed supported environment.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Sophos Workspace Protection (includes Sophos ZTNA) | per-user termed license; MSP monthly option · quote required · bundle includes Protected Browser, Extension, ZTNA, endpoint DNS protection, Email Monitoring System, and Sophos Fusion | On request |
As sophos.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
Sophos ZTNA focuses on controlled user access to private applications, with posture checks and multiple identity-provider options. Pricing is by quote through Workspace Protection, and the listed trial lasts 30 days.
Facts from Sophos ZTNA's own pages
- Access model
- ztna · sophos.com, 22 Sept 2026
- Access security
- Access policies can use device posture to block compromised devices from connecting. · sophos.com, 11 Oct 2026
- Admin control level
- advanced · sophos.com, 22 Sept 2026
- Agent platforms
- The ZTNA Agent supports Windows 10 and 11 on Intel and ARM, plus macOS Sonoma, Sequoia, and Tahoe on Intel and Apple processors. · sophos.com, 11 Oct 2026
- Audit logs
- Yes · sophos.com, 22 Sept 2026
- Company
- Sophos says it delivers AI-native cybersecurity and reports more than 625,000 global customers. · sophos.com, 11 Oct 2026
- Company history and location
- A Sophos company profile states it was founded in Oxford, England in 1985; Sophos Limited lists its registered office in Abingdon, United Kingdom. · news.sophos.com, 11 Oct 2026
- Device posture
- Yes · sophos.com, 22 Sept 2026
- Device posture integration
- ZTNA Agent device posture uses Sophos Security Heartbeat from Sophos Endpoint. · sophos.com, 11 Oct 2026
- Founded
- 1985 · sophos.com, 4 Oct 2026
- Gateway capacity
- Sophos specifies up to 10,000 agent connections per gateway node and up to 90,000 across a cluster of at most nine nodes. · sophos.com, 11 Oct 2026
- Gateway deployment
- ZTNA Gateway runs on VMware ESXi 7+, Hyper-V 2016+, or Sophos Firewall. · sophos.com, 11 Oct 2026
- Identity providers
- The listed identity providers for ZTNA are Microsoft Active Directory on premises, Microsoft Entra ID, and Okta. · sophos.com, 11 Oct 2026
- Licensing
- Workspace Protection, which includes ZTNA, is sold standalone per user on a termed license or monthly through managed service providers; pricing is by quote. · sophos.com, 11 Oct 2026
- Management
- Sophos Fusion provides a unified cloud management console with real-time information sharing and automated incident response, and it includes ZTNA management. · sophos.com, 11 Oct 2026
- Product role
- Sophos ZTNA securely connects users to only the applications they need while making private applications invisible to the outside world. · sophos.com, 11 Oct 2026
- Protected Browser
- ZTNA integrates with Sophos Protected Browser, which includes an RDP and SSH client for application and system access. · sophos.com, 11 Oct 2026
- Remote workforce
- Sophos describes ZTNA as a replacement for legacy remote access VPN for remote and hybrid workers. · sophos.com, 11 Oct 2026
- Site-to-site networking
- No · sophos.com, 22 Sept 2026
- SSO / SCIM
- Yes · sophos.com, 22 Sept 2026
- Supported platforms
- Windows,macOS,web,VMware ESXi,Hyper-V,Sophos Firewall · sophos.com, 22 Sept 2026
- Trial
- Sophos offers a free, no-obligation 30-day trial of Workspace Protection. · sophos.com, 11 Oct 2026
Where Sophos ZTNA stands on Freedom251
- Business VPN Software#48 of 94