Sophos Brings Industry-First Complete Endpoint Protection
December 2011 by Marc Jacob
IT security and data protection company Sophos announced the latest version of its endpoint security solution.
Reducing the Attack Surface
According to industry estimates, as many as 90 percent of successful attacks are against vulnerabilities in which a patch already exists. Despite this statistic, many computers do not have the latest security patches installed, putting organizations at serious risk from a variety of malware threats. Patches are time-consuming to track and administer, and it is often difficult to see which computers actually have critical patches installed correctly. Without this visibility, IT managers have no simple method of identifying computers most at risk.
Sophos Patch Assessment identifies, prioritizes and scans for critical threat-related security patches. With the backing of SophosLabs, IT and security departments now know which threats a patch prevents, from the most critical to the least critical. Sophos Patch Assessment also enables scanning for Microsoft and third-party patches from vendors such as Adobe, Apple, Citrix, Microsoft, Skype and others. This is particularly important as the majority of today’s patches are not from Microsoft.
Web Protection and Filtering That Follows the User Everywhere
Security vendors are now combining reputation-based data with URL filtering to stop users from accessing sites known to be infected, or sites that repeatedly host malware or other unwanted content. Reputation-based URL filtering that performs real-time lookups against the security vendor’s database is especially effective at blocking the thousands of new malware sites, search engine optimization (SEO) poisoning attacks and hijacked trusted sites that pop up daily.
Sophos Web Filtering makes it easy to set a smart surfing policy for the top 14 most inappropriate site categories from within the Endpoint Enterprise Console. With Sophos Web Filtering, users are protected from these sites wherever they go, with no additional software or infrastructure required. Sophos Web Filtering enables better performance for users, as scanning is done locally, not back to a box in the datacenter, thereby reducing the number of boxes needed to manage web usage.
In a recent poll conducted on Naked Security asking if companies should block access to websites containing offensive content, more than 77 percent of the 4,600 respondents felt these sites should be blocked.
Encryption Made Simple
Full-disk encryption in Sophos Endpoint ensures that data stored on desktops and laptops is kept secure, enabling IT staff to encrypt workstations and see their status. Moreover, Sophos encryption is integrated into this latest version of Sophos Endpoint, without a separate deployment or console required, making it faster and easier to install full-disk encryption on computers in just six clicks.
According to Gartner’s “Buyer’s Guide to Endpoint Protection Platforms,” December 15, 2010, “by combining multiple technologies into a single management framework, EPPs (endpoint protection platforms) have the promise of increasing security while also lowering complexity, cost and administrative overhead.”