33
1 Lars Putteneers Sales Engineer Sophos Cloud Breaking the stereotypes

Sophos Cloud - breaking the stereotypes

Embed Size (px)

Citation preview

Page 1: Sophos Cloud - breaking the stereotypes

1

Lars PutteneersSales Engineer

Sophos Cloud Breaking the stereotypes

Page 2: Sophos Cloud - breaking the stereotypes

22

Industry overview

Page 3: Sophos Cloud - breaking the stereotypes

3

Corporate Perimeter

VPN

Corporate Perimeter

Cloud Services

Dissolving Corporate Perimeter

Page 4: Sophos Cloud - breaking the stereotypes

4

I hate to break it to you……

Page 5: Sophos Cloud - breaking the stereotypes

5

End user Endpoint protection

Mobile security

Web gateway

Advanced User Protection

Integrated User-based policy, management and reporting

Page 6: Sophos Cloud - breaking the stereotypes

66

Sophos Cloud Overview

Page 7: Sophos Cloud - breaking the stereotypes

7

Sophos Cloud is…

Easy to use

• Easy to try• Cloud-based• No management

server required• Works out of the box

IntegratedComprehensive

• Endpoint Security: Windows, Mac, Servers

• Mobile: iOS & Android

• Secure Web Gateway

• Secure Mail Gateway

• Cloud managed WiFi

• Single user-based policy for workstations, mobile devices, and web gateway

• Only cloud-managed security product that is fully integrated

Page 8: Sophos Cloud - breaking the stereotypes

8

Sophos Cloud Products

Endpoint Protection

Mobile Control

Server Protection

Web Gateway

Email Gateway

For Channel Partners• Customer and License

Management• Cross-customer security

incident management

Sophos CloudFor Administrators• Unified management and

reporting• Simple to deploy – no

servers to manage

Sophos Cloud

Key Benefits:• Easy Deployment• Simple management• Faster delivery of security• Comprehensive & integrated - Enhanced deeper security and visibility• Modular – simple add-on license activation

Page 9: Sophos Cloud - breaking the stereotypes

99

Endpoint/Enduser protection

Page 10: Sophos Cloud - breaking the stereotypes

10

RemediationRemoves detected malware automatically; Security Heartbeat (Galileo)

enables a synchronized security response with Copernicus Firewall

PreventionCorrelates threat indicators to block web and application exploits, dangerous URLs, potentially unwanted apps and malicious code

DetectionAnalyzes software behavior and network traffic in real time, alerting

you to hidden threats that can be missed by traditional AV technology

Next Generation Endpoint Protection

Page 11: Sophos Cloud - breaking the stereotypes

11

What’s new in Sophos Cloud Endpoint Protection

Applicationcontrol

Download reputationAdware & PUA

detection for Mac

Page 12: Sophos Cloud - breaking the stereotypes

1212

Server Protection

Page 13: Sophos Cloud - breaking the stereotypes

13

Sophos Cloud Server Protection Standard and Advanced

Simple

• One-Click lockdown• Automatic trust rules• Cloud-managed:

Instant deployment. • Server-specific policy• Automatic exclusion

Great Protection

• Whitelisting integrated with AV and HIPS

• Web Security

Fast performance

• Fast scanning• Low impact• Won’t slow

down servers

unique unique

Page 14: Sophos Cloud - breaking the stereotypes

14

Positioning Server Protection

• Server Protection Standard○ Server AV for Windows and Linux○ Automatic Scanning exclusion for windows○ Can be upgraded from free Linux AV○ Agentless option for VMWare virtualization platform (vShield)

• Server Protection Advanced○ Server Standard + Server lockdown

Sophos Server Protection offers the best protection, performance and ease of use.

It’s the best choice for the mid-market.

Page 15: Sophos Cloud - breaking the stereotypes

15

Server Lockdown with One Click

Page 16: Sophos Cloud - breaking the stereotypes

16

What happens when you click “Lockdown”

Status

Server Management

Receive Rules from Server Authority

Whitelisting

Check if it needs to be whitelisted

Check if it is maliscious

Create a profile/fingerprint executable

Add to whitelist

Applying Trust

Identifytrust rules

Applytrust rules

Sophos Cloud

Page 17: Sophos Cloud - breaking the stereotypes

17

Sophos Cloud

https://cloud.sophos.com

Page 18: Sophos Cloud - breaking the stereotypes

1818

Sophos Cloud Mobile Control & Mobile Security

Page 19: Sophos Cloud - breaking the stereotypes

19

MDM: Sophos Cloud Mobile Control

Simple to Manage, Enhanced (IT) Productivity & Cost Savings(50% Savings Compared to Competitors)

Manage Device

• Support BYOD• OTA enrolment

and configuration• One policy for iOS

and Android

Secure Device

• Enforce passcodes & encryption

• Locate, Lock and wipe

• Compliance

Protect Data

• Configure email access

• Configure Wi-Fi access

Page 20: Sophos Cloud - breaking the stereotypes

20

Sophos Cloud Mobile Security

Country Malware PUAUnited States 4,49 14,28Germany 4,84 9,71Netherlands 6,65 17,64UK 5,51 10,97France 5,2 14,19Canada 2,29 14,13Australia 3,75 14,3Singapore 11,82 28,89

% infected devices Jan-Jun/15

Protects Android devices from malware, risky apps and websites

SophosLabs 2015

Proven SMSec client can be managed from Sophos Cloud and integrated with MDM

Launched October 2015

Differentiated protection, scalable cloud managed, user licenced, unbundled.

- Integrate with Sophos MDM - Extend End-User

protection

Global mobile malware concerns (IDC, Germany)

Global Treat Trends SophosLabs

Page 21: Sophos Cloud - breaking the stereotypes

21

Integrated in Sophos Cloud Dashboard

Page 22: Sophos Cloud - breaking the stereotypes

22

Sophos Mobile Control

https://smc-eval1.sophos.com/admin

Page 23: Sophos Cloud - breaking the stereotypes

2323

Sophos Cloud Web Gateway

Page 24: Sophos Cloud - breaking the stereotypes

24

Supported PlatformsMac & Windows Available Now, Other Platforms Coming Soon

Mac OS X 10.8.5+ Windows 7+

Android 4.0+ iOS 5.0+Chromebook

Coming in late Q3

Page 25: Sophos Cloud - breaking the stereotypes

25

Global Network Optimized for Mobile Workforce

Lightweight Endpoint Agent• Proxies data traffic to a Sophos Gateway• Dynamically chooses the best performing

gateway• Knows what traffic not to proxy based on

policy

Globally distributed gateways• Analyze each packet for threats• Apply corporate policies • Aggregate data for real-time analytics

Central Management through Sophos Cloud

Globally Distributed Gateways

Page 26: Sophos Cloud - breaking the stereotypes

26

Sophos Cloud Web Gateway Security & ControlAdvanced Protection and Granular Control

Security and Control

• Web filtering on 90+ categories

• App & URL filtering

• Anti-malware and anti-phishing based on Sophos Labs

• Lightweight DLP (keyword content scanning)

• SSL scanning – zero touch SSL certificate management

• Google SafeSearch

Page 27: Sophos Cloud - breaking the stereotypes

27

CWG Visibility & ReportingBig Data Reporting and Analytics made Simple

Visibility and Reporting

• Org wide reporting• Bandwidth, threats,

category, domain, protocol

• Per user reporting• Same reports as

org

• Network usage• By app, user,

category, location, device, domain, protocol

• Malware & phishing reporting

Page 28: Sophos Cloud - breaking the stereotypes

28

Differences Between Web Security ProductsCloud A/V

Web Controls SWA UTM Cloud Web Gateway

Web filtering 54 categories 54 categories 54 categories 90 categories

Reporting Limited Great Good Good

SSL Scanning ✗ Admin must deploy certificates

Admin must deploy certificates

Keyword filtering (DLP) ✗ ✗ ✗ ✔

Custom block pages ✗ ✔ ✔ ✔

User feedback to admin ✗ ✔ ✗ Q4

App controls ✗ ✔ ✔ Q4

User time quotas ✗ ✔ ✔ Q4

Safesearch / Youtube ✗ ✔ ✔ ✔

Real-time logging ✗ ✔ ✔ ✔

Syslog ✗ ✔ ✔ Q1

Sand-boxing ✗ Q4 Q1 Q1

Page 29: Sophos Cloud - breaking the stereotypes

2929

Sophos Cloud Email Gateway

Page 30: Sophos Cloud - breaking the stereotypes

30

Sophos Cloud Email GatewaySophos Cloud simplicity – with cutting edge mail security

https://asp.reflexion.net/home

Page 31: Sophos Cloud - breaking the stereotypes

3131

Sophos Cloud Licensing

Page 32: Sophos Cloud - breaking the stereotypes

32

Cloud protection

Page 33: Sophos Cloud - breaking the stereotypes

33© Sophos Ltd. All rights reserved.