Protect computers and data with a single solution Sophos Endpoint Security and Data Protection secures computers and data without stretching your budget. Simplified cross-platform security, centralized management, full data encryption and flexible control of devices, applications and network access ensure you to secure your data from infection and loss as well as comply with government and industry regulations.

Simplified and automated management
Our management console reduces administrative burden by automating the deployment of protection, and simplifying policy management and reporting. The dashboard provides instant visibility of the protection status across Windows, Mac, Linux and UNIX platforms, and enables the centralized clean-up of malware, and fixes non-compliant computers.

Trusted support
Every Sophos customer receives unlimited 24x7 technical support from in-house support experts. The global network of SophosLabs™ researchers use pioneering detection technologies to protect businesses from known and emerging threats, such as malware, phishing and spam. Professional Services packages, delivered by experienced Sophos consultants, help to ensure that customers receive the maximum return on investment.

Key benefits

• Eliminates known and unknown threats with a single, centralized solution. Detects and removes viruses, spyware, rootkits, Trojans, adware and PUAs
• Controls applications that can adversely impact network and user productivity, such as VoIP and IM
• Allows assessment of the security status of managed and unmanaged computers. Alerts of issues such as a disabled patch agent or firewall, and can provide automatic resolution
• Enforces protection against unknown users gaining access to your network
• Ensures compliance and prevents the loss of data by encrypting devices and information
• Lets you rapidly create and update security policies, and deploy them across multiple groups simultaneously
• Receives and centrally deploys small, fast automatic updates every five minutes
• Allows automatic deployment to new computers through Active Directory synchronization
• Lets you instantly identify vulnerable computers to check compliance, update policies and clean up threats
• Provides role-based administration privileges assigned with Helpdesk and read-only consoles
• Enables a wide range of customized, graphical reports to be created on virus alerts, infections and status of protection
• Includes 24x7x365 support for the duration of the license and one-toone assistance
  

Software components

Enterprise Console
A single, automated console for Windows, Mac, UNIX and Linux that centrally deploys and manages antivirus and client firewall protection, intrusion prevention, device and application control and endpoint assessment and control.

Sophos Anti-Virus
A single anti-virus client that detects viruses, spyware and adware, rootkits, suspicious files, suspicious behavior, removable storage devices and unauthorized VoIP, IM, P2P and gaming software across multiple platforms in just one scan.

Sophos NAC
A network access control solution that assesses managed, unmanaged and unauthorized computers to detect configuration issues, such as out-ofdate anti-virus protection or a disabled firewall and optionally fixes them before allowing access.

Sophos Client Firewall
A centrally managed client firewall, designed for the enterprise environment, that blocks worms, stops hackers, and prevents intrusion from hackers.

Sophos Mobile Security
Anti-virus and anti-spyware protection for Windows Mobile smartphones and PDAs.

Sophos SafeGuard Disk Encryption
Full disk encryption with secure pre-boot authentication and a full set of password and machine recovery tools.

SafeGuard PrivateCrypto
Encryption of data on removable storage devices and secure information exchange with third parties.

Faster, low-impact protection
One scan with our single anti-virus client detects viruses, spyware and adware, suspicious behavior and files, removable storage devices and unauthorized applications.

Effective zero-day protection
Sophos HIPS, technology pioneered by SophosLabs, provides detection that automatically guards against new and targeted threats and can detect over 85 percent of unknown threats.

The built-in intrusion-prevention technology detects malware, malicious and suspicious behavior and files, and delivers proactive protection without complex installation and configuration. Scanning is performed using Sophos’s anti-virus engine, without the need to deploy any additional components.

This innovative technology uniquely analyzes the behavior of code at two stages:

• Pre-execution – behavior of code is analyzed before it runs and is prevented from running if it is considered to be suspicious or malicious.
  
• Runtime – intercepts threats that cannot be detected before execution.
  

Preventive protection reduces risk of infection
By identifying managed and unmanaged computers with potential security flaws, like out-ofdate anti-virus protection or a disabled firewall, you can reduce the risk of infection. You can choose to either block non-compliant computers or ensure that security is improved to meet a required standard before allowing access.

• Default policies check if anti-virus and client firewall protection is active and up to date on managed and unmanaged computers.
• Sophos NAC agent checks if Microsoft operating system service packs are installed, and that Microsoft/Windows Update is enabled.
• Enforcement options ensure that any unauthorized computers are not granted access to your network.

Full data encryption provides comprehensive information security
Sophos SafeGuard Disk Encryption is an easy to implement solution providing full disk encryption that helps you to meet your compliance needs.

• Simple to use configuration wizard enables easy implementation and enforcement of your data security policy.

• Installation can be carried out on a standalone machine or unattended across your estate via your existing deployment tool.

• Requires no user intervention, eliminating any impact on their day-to-day productivity.

Simplifying deployment and administration
Sophos Enterprise Console simplifies management of Windows, Mac, Linux and UNIX protection, centralizing deployment, updating, reporting and security policy enforcement. It manages anti-virus and client firewall protection, and endpoint assessment and control, providing unrivalled visibility of the security status of your entire network.

• The console synchronizes with Active Directory to ensure your chosen security policy is automatically enforced as new computers join your network.
• Outbreak risk levels across the entire network are displayed on the security dashboard and automatic email alerts are sent when your chosen security thresholds are threatened.
• Protection is automatically updated as frequently as every five minutes – and because you control the download rate, you can preserve bandwidth.
  Endpoint computers can be completely disinfected in a single, simple operation from the console.
• ActivePolicies in the console allows you to create a policy once and then apply it across multiple groups, on Windows, Mac, Linux and UNIX computers.
• Policies cover updating schedules, anti-virus and HIPS, client firewall, application control and NAC.
• Integrated graphical reporting delivers instant and scheduled email reports of threat alerts and infections while the security dashboard gives you an at-a-glance report of outbreak risk.

Trusted support from the experts
All Sophos products are supported by experienced Sophos teams who are on hand to ensure you benefit from the best protection, and maximum return on investment.

• Highly-skilled analysts in SophosLabs, our global network of threat analysis centers, provide proactive rapid protection against known and unknown threats.
• Through technology, global visibility of emerging threats, and integrated threat expertise, SophosLabs provides the 24x7 research and fast global response your organization needs to protect it from increasingly complex threats.
• Our round-the-clock technical customer support operation is included as standard in every license and includes access to our in-house customer support team.
• Our support engineers provide one-to-one support by email or telephone, or you can take advantage of our web-based support knowledgebase.
  Sophos Professional Services team can demonstrate how to get the most out of Sophos products through optimizing your implementation.

Simple pricing and licensing
A subscription-based license entitles you to protection, management and product updates, as well as technical support.

Web Security and Control, Email Security and Control, and NAC Advanced services can all be included in one license.

Platforms supported

SOPHOS ANTI-VIRUS
» Windows
Server 2008*/Vista*/2003*/
XP*/2000/98/NT4/Mobile**

» VMWare
ESX 3.0, 3.5/Workstation 5.0/
Server 1.0

» Non-Windows platforms

Mac OS X/Linux**/UNIX**/NetApp
Storage Systems/OpenVMS/NetWare

SOPHOS NAC
» Windows
Vista/XP/2000

SOPHOS CLIENT FIREWALL
» Windows
Vista/XP Pro or Home/2000 Pro

ENTERPRISE CONSOLE Management server
» Windows
Server 2008/Server 2003/2000 Server

» VMWare
ESX 3.0, 3.5/Workstation 5.0/
Server 1.0

Remote console

» Windows
2003/2000 Pro or Server/XP Pro

» VMWare
ESX 3.0, 3.5/Workstation 5.0/
Server 1.0

Platforms managed

» Windows
Server 2008*/Vista/Server 2003/ XP/2000/98/95/NT4

» Mac OS X
Versions 10.4/10.5 » Linux** » UNIX**

SOPHOS SAFEGUARD DISK ENCRYPTION
» Windows
XP Pro or Home/2000 Pro

* Including AMD64 and Itanium 64-bit versions ** For full details, visit www.sophos.com

Sophos Endpoint Security & Data Protection Datasheet