Sophos Endpoint Security and Data Protection 9.5 has now launched!

Anti-virus

Stop malware with fast scanning, built-in intrusion prevention and live in-the-cloud protection technologies.

Live protection

Stop previously unseen threats - faster

Our new in-the-cloud technology delivers the most efficient, most proactive security solution for all your fixed and mobile endpoints.

With instant access to the very latest threat data in SophosLabs' extensive reputation database, it's all the protection you need, without any of the complex configuration. Sophos customers that use Live Protection are watch dogs for the latest threats.

As soon as a single customer's check identifies a new threat it automatically updates SophosLabs' threat database, providing better protection to all Sophos customers. There's no better way to defend against the latest zero-day threats.

Management

Sophos Enterprise Console makes security management easier with unrivalled visibility and control of your network.

Easy administration saves time

• Monitor and configure protection across Windows, Mac, Linux and UNIX from a single console
• Find and fix issues quickly and disinfect computers remotely in a single, simple operation
• Create policies fast and apply across multiple groups simultaneously
• Delegate day-to-day tasks with role-based administration, increasing efficiency without sacrificing control
• Get instant threat reports on the dashboard and automatic alerts when security thresholds are threatened
• Customise integrated graphical reporting for instant and scheduled reports and have them automatically emailed direct to the people that need them

Simplified management ensures better protection

• Manage everything from a single point: anti-virus, updating, client firewall, data control, device control, application control and network access control
• Automate protection with Active Directory synchronization; removes old security products automatically during deployment
• Assess managed and guest computers for security policy and patch status before allowing network access
  
• Eliminate the complexity of endpoint protection - SophosLabs ensures protection is fine tuned so you don't have to
• Get the latest protection without the heavy lifting - SophosLabs provides you with small, frequent updates against known threats and an in-the-cloud reputation database of the very latest threats

Application Control

Control VoIP, IM, games and more

Our application control technology gives you control over unauthorised software. SophosLabs develops the pioneering technology built into our products. Our application control technology gives administrators control over applications that could cause security or legal issues in the workplace.

Reducing security, legal, support and productivity risks

System administrators tell us that applications with the potential to create security, legal, support and productivity issues cause the most concern.
Users with local administration rights can download and install applications of their own choosing. While some applications can provide efficiency gains, others can lead to less desirable results.

Security is the biggest concern, with P2P and IM-based malware attacks growing fast. Regulations including Sarbanes-Oxley, HIPAA and the Data Protection Act make it a priority to maintain and protect data. Installation of unauthorised IM and P2P applications increases the risk of a legal breach.

Unauthorised applications can also be a support headache if not properly tested and deployed; they can impact on productivity with users playing games when they should be working, and use up valuable network bandwidth and processing power.

How integrated application control works

Our anti-virus client uses signatures to detect consumer applications that could be unsuitable for your workplace. These signatures are created and updated by SophosLabs in exactly the same way that our labs handle malware detection. In some cases, a single signature will cover a group of applications, such as games from a named publisher.

As SophosLabs and our software do most of the work, all that's left for the administrator to do is simply set a block or allow policy in the management console for different groups of computers. For example, VoIP could be switched off for office-based desktop computers, yet authorised for remote computers.

The Sophos approach to application control simplifies administration, updating and maintenance. Sophos removes the need for administrators to create detection for applications and keep that detection accurate when vendors are frequently updating and patching them.

Discover the controllable applications on your network
Our free Application Discovery Tool will scan your network for consumer applications that our technology can control. The tool operates alongside your existing anti-virus software, and can help you identify and locate unauthorised applications on your network.

Device Control

Control USB keys, drives and wireless networking

Our device control technology helps you to reduce the risk of data leakage and malware infection

SophosLabs develops the pioneering technology built into our products. Our device control technology gives administrators control over removable storage devices as a fundamental step in preventing data leaks and reducing the risk of malware infection.

Controlling devices - a key requirement of any DLP policy

Businesses and government agencies are increasingly reporting the loss of confidential personal data that has left thousands - even millions - vulnerable to identity theft.

Administrators are concerned that users routinely store sensitive information on mobile and removable storage devices, such as CDs and USB keys, which increases the risk of intentional or accidental data loss incidents. Such devices also pose an additional risk of introducing malware to an organisation's network.

Reducing these risks through greater control - but without extra overheads - is the challenge.

Integrated device control in Endpoint Security and Data Protection

• Endpoint Security and Data Protection lets you control the use of devices through the anti-virus client, while it simultaneously scans for malware and controlled applications.
  
• Detects and blocks unauthorised use of removable storage devices, optical media drives and wireless networking protocols (WiFi, Bluetooth and Infrared)
  
• Allows administrators to set a block or allow policy for different groups of computers
  
• Reports instantly on device activity in the management console
  
• Simplifies administration with a single console for anti-virus, firewall, application control, device control and network access control

Data Loss Prevention

Key features
Sophos takes a unique and simple approach to data loss prevention by integrating the scanning for sensitive information into the anti-virus engine on both the endpoint and email appliances. This makes it easier for you to configure, deploy and manage, as well as removing the need for separate DLP solutions to be deployed on both the endpoints and mail gateway.

Our data control enables you to monitor for the transfer of sensitive data, such as Personally Identifiable Information (PII) or company confidential documents. You can reduce the risk of this data being accidentally saved to removable storage device or sent out of the organisation, without preventing your employees from going about their daily tasks.

By combining our integrated data control with full disk and SPX email encryption, granular device control and application control, you can easily implement a comprehensive data protection strategy all for the same price as your threat protection.

Integrated data protection

• Reduce the impact on system performance with a single agent that scans for sensitive data as well as malware
  
• Enable consistent data protection across your endpoints and email gateway preventing the transfer of sensitive data to removable storage devices, applications such as browsers and instant messaging clients, or via email.

Easy to configure and deploy

• Manage data control policies centrally and deploy across your entire estate or to specific groups.
  
• Implement data protection out of the box with pre-packaged data definitions including bank account details and social security numbers, supplied by and updated by SophosLabs.
  
• Easily customise your content control lists and keep them consistent across your endpoints and email gateway.
• Automatically allow or block file transfers at the endpoint - or give your users the ability to authorise transfers through desktop prompts. All end user decisions will be audited and can be reviewed in the management console.

Encryption

Key features
Sophos SafeGuard Disk Encryption - part of Sophos Endpoint Security and Data Protection - delivers full disk encryption and SafeGuard
PrivateCrypto allows information encryption on removable storage devices as well as secure data exchange with third parties - all within your endpoint budget. Designed to fit within existing IT management processes, it's an easy to implement solution that helps you quickly meet compliance needs.

Proven, certified encryption

• Protect your company data with proven SafeGuard Full Disk Encryption (FDE). It is based on industry-certified (Common Criteria CC EAL 3, FIPS 140-2) technology already protecting millions of users
  
• Trust SafeGuard's sophisticated and reliable encryption solution to protect the entire hard disk including the operating system files, hibernation and temp files
  
• Eliminate the risk of storing enciphering keys on disk with the SafeGuard approach of dynamically generating keys from the password
  
• Check compliance by using Sophos NAC Advanced to monitor the encryption state

Easy to deploy

• Quickly and easily implement your data security policy with the simple-to-use configuration wizard
  
• Install transparently to end users, either directly to standalone machines or unattended across network
  
• Easily recover forgotten passwords using the built-in secure challenge response process
  
• Recover data fast with a full set of recovery and repair tools
  

Easy for end users

• Allow users to continue working as they always have with a single sign-on after entering their password at the Power On Authentication (POA), a secure login outside of the operating system
  
• Enable users to recover forgotten passwords during pre-boot with local self-help, eliminating calls to the help desk or the need for an internet connection
  
• Enable secure data sharing with third parties through easy-to-use encryption integrated into Microsoft Windows Explorer and standard email applications such as Lotus Notes and Microsoft Outlook

Network Access Control

Endpoint assessment and control - how much control do you want?
Prevent security issues by assessing and controlling all managed and unmanaged computers. Our software will enable you to:

• Detect and fix managed endpoint vulnerabilities
  
• Ensure that any guest computers match your security requirements before they access your network
  
• Prevent unauthorised computers from accessing the network.

Choose how much control you want:

• Endpoint Security and Data Protection gives you fundamental control of the security status of managed and unmanaged computers.
  
• Sophos NAC Advanced gives you greater control through more sophisticated policy definitions, and advanced reporting capabilities.

Support

Technical Support - Providing help 24/7

Sophos Technical Support is delivered through three packages: Standard, Premium and Platinum. Each package ensures you get the most out of your investment and that you remain protected against increasingly complex and evolving threats.

A global team of Sophos experts provides 24-hour help all year round with installing, configuring and upgrading our products and resolving any technical issues.

Standard Support is available around the clock, every day of the year and is included at no extra cost in all subscription licences. For perpetual licences, Standard Support must be purchased separately. Premium and Platinum Support are available for an additional fee, based on your licence cost, and provide penalty-backed service level agreements.

We are a member of TSANet (www.tsanet.org), the worldwide vendor-neutral support alliance. This means that we can work directly with other vendors to help solve problems that involve their technologies.

Key benefits

• Delivers help 24/7 via phone, Web or email
  
• Provides assistance in your language
  
• Works with other vendors on cross-platform issues

find out more

If you have further questions, please contact your Phoenix Account Manager on 0845 265 1265 or email info@phoenixs.co.uk