Sophos Firewall without an active subscription will no longer have access to Central Firewall Management and Reporting. - Click here for more details.
The endpoint security client has tamper protection which locks down the clients settings as well as the ability to uninstall it. There is a tamper protection password unique to each machine.