Sophos XG 115 User Manual

4.3 (3)
Sophos XG 115 User Manual

Sophos XG Firewall

Unrivalled Security, Simplicity and Insight

Sophos XG Firewall brings a fresh new approach to the way you manage your firewall, respond to threats, and monitor what’s happening on your network.

Sophos XG Firewall

Sophos XG Firewall

Sophos XG Firewall provides comprehensive next-generation firewall protection that blocks unknown threats, automatically responds to incidents, and exposes hidden risks.

Blocks unknown threats

Sophos XG Firewall provides all the latest advanced technology you need to protect your network from ransomware and advanced threats including top-rated IPS, Advanced Threat Protection, Cloud Sandboxing, Dual AV, Web and App Control, Email Protection and a full-

featured Web Application Firewall. And it’s easy to setup and manage.

Potent, powerful … fast

We’ve engineered XG Firewall to deliver outstanding performance and security efficiency for the best return on your investment. Our appliances are built using Intel multi-core technology, solid-state drives, and accelerated

in-memory content scanning. In addition, Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput.

Automatically responds to incidents

XG Firewall is the only network security solution that is able to fully identify the source of an infection on your network and automatically limit access to other network resources in response. This is made possible with our unique Sophos Security Heartbeat™ that shares telemetry and health status between Sophos endpoints and your firewall.

Simply manage multiple firewalls

Sophos Firewall Manager provides a single console for the complete central management of multiple XG Firewalls. And if you also want to consolidate reporting across multiple XG, SG, and Cyberoam appliances then with Sophos iView, you can.

Exposes hidden risks

Sophos XG Firewall provides unprecedented visibility into top risk users, unknown apps, advanced threats, suspicious payloads and much more. You also get rich on-box reporting included at no extra charge and the option to add Sophos iView for centralized reporting across multiple firewalls.

1

Sophos XG Firewall

Security features you can’t get anywhere else

XG Firewall includes a number of innovations that not only make your job a lot easier, but also ensure your network is more secure.

A revolution in advanced threat protection – Sophos Synchronized Security

An industry first, Synchronized Security links your endpoints and your firewall to enable unique insights and coordination. Security Heartbeatrelays Endpoint health status and enables your firewall to immediately identify and respond to a compromised system on your network. The firewall can isolate systems until they can be investigated and cleaned up. Another Synchronized Security feature, Synchronized

App Control, also enables the firewall to query the endpoint to determine the source of unknown traffic on the network.

Patented Layer-8 identity control

User identity takes enforcement to a whole new layer with our patented Layer-8 identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device. It literally takes firewall policy to a whole new layer.

Policy templates get you protected fast

Pre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint quickly and easily. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/ outbound firewall rules and security settings for you automatically – displaying the final policy in a statement in plain English.

Automated user risk reports

The Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. Our firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behavior.

Flexible deployment, no compromise

Unlike our competitors, whether you choose hardware, software, or virtual, we don’t make you compromise – every feature is available on every model and formfactor.

To find out more visit www.sophos.com/xgfirewall

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

XG Series

Software

Purpose-built devices

Install the Sophos Firewall

to provide the ultimate

OS image on your own

in performance.

Intel hardware or server.

Virtual

Azure

Install on VMware,

Protect your network

Citrix, Microsoft

infrastructure in the

Hyper-V and KVM.

Azure cloud.

2

Sophos XG Firewall

Network Protection

All the protection you need to stop sophisticated attacks and advanced threats while providing secure network access to those you trust.

Next-gen Intrusion Prevention System

Provides advanced protection from all types of modern attacks. It goes beyond traditional server and network resources to protect users and apps on the network as well.

Advanced Threat Protection

Instant identification and immediate response to today’s most sophisticated attacks. Multi-layered protection identifies threats instantly and Security Heartbeatprovides an emergency response.

Security Heartbeat

Creates a link between your Sophos Central protected endpoints and your firewall to identify threats faster, simplify investigation and minimize impact from attacks. Easily incorporate Heartbeat status into firewall policies to automatically isolate compromised systems.

Advanced VPN technologies

Adds unique and simple VPN technologies including our clientless HTML5 self-service portal that makes remote access incredibly simple or utilize our exclusive light-weight secure RED (Remote Ethernet Device) VPN technology.

Web Protection

Comprehensive web protection and application control with powerful and flexible policy tools ensure your networked users are secure and productive.

Powerful user and group web policy

Provides enterprise-level Secure Web Gateway policy controls to easily manage sophisticated user and group web controls. Apply policies based upon uploaded web keywords indicating inappropriate use or behavior.

Advanced Web Threat Protection

Backed by SophosLabs, our advanced engine provides the ultimate protection from today’s polymorphic and obfuscated web threats. Innovative techniques like JavaScript emulation, behavioral analysis, and origin reputation help keep your network safe.

High performance transparent proxy

Optimized for top performance, our transparent proxy technology provides ultra-low latency inspection and HTTPS scanning of all traffic for threats and compliance.

Layer-8 Application Control and QoS

Enables user-aware visibility and control over thousands of applications with granular policy and traffic-shaping (QoS) options based on application category, risk, and

other characteristics.

Sandstorm Protection

Sophos Sandstorm uses next-gen cloud-sandbox technology to give your organization an extra layer of security against ransomware and targeted attacks.

No Additional Hardware

It integrates with your XG Firewall and is cloud-delivered so there’s no additional hardware required. Sophos Sandstorm blocks evasive threats like ransomware, disguised as executables, PDFs, and Microsoft Office documents — sending them to a cloud-sandbox to be detonated and observed in a safe environment.

Better Protected, Better Informed

Threat intelligence is fed back to your XG Firewall and the file blocked or permitted. The process takes just a couple of minutes with minimal impact for the user. And Sandstorm gives you detailed threat reports for every incident so you know exactly what’s going on.

3

Sophos XG Firewall

Email Protection

Full SMTP and POP message protection from spam, phishing and data loss with our unique all-in-one protection that combines policy-based email encryption with DLP and anti-spam.

Integrated Message Transfer Agent

Ensures always-on business continuity for your email, allowing the firewall to automatically queue mail in the event servers become unavailable.

Live Anti-Spam

Provides protection from the latest spam campaigns, phishing attacks, and malicious attachments .

Self-serve Quarantine

Gives employees direct control over their spam quarantine, saving you time and effort.

SPX Email Encryption

Unique to Sophos, SPX makes it easy to send encrypted email to anyone, even those without any kind of trust infrastructure using our patent-pending password-based encryption technology.

Data Loss Prevention

Policy based DLP can automatically trigger encryption or block/notify based on the presence of sensitive data in emails leaving the organization.

Web Server Protection

Harden your web servers and business applications against hacking attempts with a full-featured Web Application Firewall while providing secure access with reverse proxy authentication.

Business Application Policy Templates

Reverse proxy

Pre-defined policy templates let you protect common

With authentication options, SSL offloading, and server load

applications like Microsoft Exchange Outlook Anywhere or

balancing ensure maximum protection and performance

SharePoint quickly and easily.

for your servers being accessed from the internet.

Protection from the latest hacks and

 

attacks

 

With a variety of advanced protection technologies

 

including URL and form hardening, deep-linking and

 

directory traversal prevention, SQL injection and cross-site

 

scripting protection, cookie signing and more.

 

4

Sophos XG Firewall

How to Buy

Every XG Firewall comes equipped with Base Firewall functionality including IPSec, SSL VPN, and Wireless Protection. You can extend protection with our bundles or by adding protection modules individually.

Network Protection

All the protection you need to stop sophisticated attacks and advanced threats while providing secure network access to those you trust.

Security Heartbeat™

Links your Sophos endpoints with your firewall to deliver unparalleled protection from advanced threats and reduce the time and complexity of responding to security incidents.

Sandstorm Protection

Web Protection

Sophos Sandstorm uses next-gen

Comprehensive web protection

cloud-sandbox technology to give

and application control with

your organization an extra layer

powerful and flexible policy tools

of security against ransomware

ensure your networked users

and targeted attacks.

are secure and productive.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Email Protection

Web Server Protection

Full SMTP and POP message protection

Harden your web servers and

from spam, phishing and data loss

business applications against

with our unique all-in-one protection

hacking attempts while providing

that combines policy-based email

secure access to external users

encryption with DLP and anti-spam.

with reverse proxy authentication.

A simple approach to comprehensive support

We build products that are simple yet comprehensive. And, we take the same approach with our support. With options ranging from basic technical support to those including direct access to senior support engineers and customized delivery.

 

 

Standard

 

Enhanced

 

Enhanced Plus

Licenses names

 

Included with purchase

 

Included in all bundles

 

 

Support

 

For 90 days

 

Included

 

VIP Access

 

 

 

Via telephone and email

 

(business hours only)

 

(24x7)

 

(24x7)

Security Updates & Patches

 

Included with an active

 

Included with an active

 

Included with an active

For the life of the product

 

software subscription

 

software subscription

 

software subscription

Software Feature Updates & Upgrades

 

Included 90-days

 

Included

 

Included

 

 

 

 

 

 

 

Consulting

 

 

 

 

 

Included

Remote consultation on your firewall configuration and

 

 

 

 

 

(up to 4 hours)

security with a Sophos Senior Technical Support Engineer

 

 

 

 

 

 

Warranty and RMA

 

1 year (return / replace)

 

Advance Exchange

 

Advance Exchange

For all hardware appliances

 

 

 

(max. 5 years)

 

(max. 5 years)

Technical Account Manager

 

 

 

Optional

 

Optional

Dedicated named technical account manager

 

 

 

(extra cost)

 

(extra cost)

 

 

 

 

 

 

 

5

Loading...
+ 14 hidden pages