Sophos XG Firewall also provides comprehensive next-generation Firewall protection that blocks unknown threats, automatically responds to incidents, and exposes hidden risks.
Blocks unknown threats
Sophos XG Firewall Blocks unknown threats Sophos XG Firewall provides all the latest advanced technology you need to protect your network from ransomware and advanced threats including top-rated IPS, Advanced Threat Protection, Cloud Sandboxing, Dual AV, Web and App Control, Email Protection and a full-featured Web Application Firewall. And it’s easy to setup and manage.Potent, powerful … fast
Sophos has engineered XG Firewall to deliver outstanding performance and security efficiency for the best return on your investment. Sophos XG Firewall appliances are built using Intel multi-core technology, solid-state drives, and accelerated in-memory content scanning. In addition, Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput.
Automatically responds to incidents
Sophos XG Firewall is the only network security solution that is able to fully identify the source of an infection on your network and automatically limit access to other network resources in response. This is made possible with their unique Sophos Security Heartbeat™ that shares telemetry and health status between Sophos endpoints and your firewall.
Simply manage multiple firewalls
Sophos Firewall Manager provides a single console for the complete central management of multiple XG Firewalls. And if you also want to consolidate reporting across multiple XG, SG, and Cyberoam appliances then with Sophos iView, you can.
Exposes hidden risks
Sophos XG Firewall provides unprecedented visibility into top risk users, unknown apps, advanced threats, suspicious payloads and much more. You also get rich on-box reporting included at no extra charge and the option to add Sophos iView for centralized reporting across multiple firewalls.
Security features you can’t get anywhere else
Sophos XG Firewall includes a number of innovations that not only make your job a lot easier, but also ensure your network is more secure.
A revolution in advanced threat protection –Sophos Synchronized Security
An industry first, Synchronized Security links your endpoints and your firewall to enable unique insights and coordination. Security Heartbeat™ relays Endpoint health status and enables your firewall to immediately identify and respond to a compromised system on your network. The firewall can isolate systems until they can be investigated and cleaned up. Another Synchronized Security feature, Synchronized App Control, also enables the firewall to query the endpoint to determine the source of unknown traffic on the network.
Policy templates get you protected fast
Pre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint quickly and easily. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/ outbound firewall rules and security settings for you automatically – displaying the final policy in a statement in plain English.
Automated user risk reports
The Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. Sophos XG Firewall firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behaviour
Patented Layer-8 identity control
User identity takes enforcement to a whole new layer with our patented Layer-8 identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device. It literally takes firewall policy to a whole new layer.
Flexible deployment, no compromise
Unlike Sophos competitors, whether you choose hardware, software, or virtual, Sophos don’t make you compromise – every feature is available on every model and form- factor.
Network Protection
All the protection you need to stop sophisticated attacks and advanced threats while providing secure network access to those you trust.
Next-gen Intrusion Prevention System
Provides advanced protection from all types of modern attacks. It goes beyond traditional server and network resources to protect users and apps on the network as well.
Advanced Threat Protection
Instant identification and immediate response to today’s most sophisticated attacks. Multi-layered protection identifies threats instantly and Security Heartbeat™ provides an emergency response.
Security Heartbeat
Creates a link between your Sophos Central protected endpoints and your firewall to identify threats faster, simplify investigation and minimize impact from attacks. Easily incorporate Heartbeat status into firewall policies to automatically isolate compromised systems.
Advanced VPN technologies
Adds unique and simple VPN technologies including Sophos clientless HTML5 self-service portal that makes remote access incredibly simple or utilize our exclusive light-weight secure RED (Remote Ethernet Device) VPN technology.
Web Protection
Comprehensive web protection and application control with powerful and flexible policy tools ensure your networked users are secure and productive.
Powerful user and group web policy
Provides enterprise-level Secure Web Gateway policy controls to easily manage sophisticated user and group web controls. Apply policies based upon uploaded web keywords indicating inappropriate use or behaviour.
High performance transparent proxy
Optimized for top performance, Sophos transparent proxy technology provides ultra-low latency inspection and HTTPS scanning of all traffic for threats and compliance.
Layer-8 Application Control and QoS
Enables user-aware visibility and control over thousands of applications with granular policy and traffic-shaping (QoS) options based on application category, risk, and other characteristics.
Advanced Web Threat Protection
Backed by SophosLabs, advanced engine provides the ultimate protection from today’s polymorphic and obfuscated web threats. Innovative techniques like JavaScript emulation, behavioral analysis, and origin reputation help keep your network safe.
Sandstorm Protection
Sophos Sandstorm uses next-gen cloud-sandbox technology to give your organization an extra layer of security against ransomware and targeted attacks.
No Additional Hardware
It integrates with your XG Firewall and is cloud-delivered so there’s no additional hardware required. Sophos Sandstorm blocks evasive threats like ransomware, disguised as executables, PDFs, and Microsoft Office documents – sending them to a cloud-sandbox to be detonated and observed in a safe environment.
Better Protected, Better Informed
Threat intelligence is fed back to your XG Firewall and the file blocked or permitted. The process takes just a couple of minutes with minimal impact for the user. And Sandstorm gives you detailed threat reports for every incident so you know exactly what’s going on.
Email Protection
Full SMTP and POP message protection from spam, phishing and data loss with our unique all-in-one protection that combines policy-based email encryption with DLP and anti-spam.
Integrated Message Transfer Agent
Ensures always-on business continuity for your email, allowing the firewall to automatically queue mail in the event servers become unavailable.
SPX Email Encryption
Unique to Sophos, SPX makes it easy to send encrypted email to anyone, even those without any kind of trust infrastructure using our patent-pending password-based encryption technology.
Live Anti-Spam
Provides protection from the latest spam campaigns, phishing attacks, and malicious attachments.
Data Loss Prevention
Policy based DLP can automatically trigger encryption or block/notify based on the presence of sensitive data in emails leaving the organization.
Self-serve Quarantine
Gives employees direct control over their spam quarantine, saving you time and effort.
Web Server Protection
Harden your web servers and business applications against hacking attempts with a full-featured Web Application Firewall while providing secure access with reverse proxy authentication.
Business Application Policy Templates
Pre-defined policy templates let you protect common applications like Microsoft Exchange Outlook Anywhere or SharePoint quickly and easily.
Reverse proxy
With authentication options, SSL offloading, and server load balancing ensure maximum protection and performance for your servers being accessed from the internet.
Protection from the latest hacks and attacks
With a variety of advanced protection technologies including URL and form hardening, deep-linking and directory traversal prevention, SQL injection and cross-site scripting protection, cookie signing and more.
