Sophos Endpoint Security and Control

Overview:

Get what you need to stop malware on your users' computers and prevent data loss—simply. Our single scanning engine is the fastest, most effective in the business, and protects you across Windows, Mac, Linux, UNIX and virtualized platforms. You'll defend against the very latest threats. And, you'll do it all using the same management console and within your antivirus budget.

Key Benefits

• Detects and removes viruses, spyware, rootkits, Trojans, adware and potentially unwanted applications (PUAs) — independent testers say it's the most effective threat detection of any major vendor
• Minimizes the impact on computer performance with our single scanning engine that independent tests rate as the fastest of any major security vendor — now up to 15% faster with Endpoint 9.7
• Stops new threats with live checks against our reputation database
• Includes DLP that lets you control the movement of sensitive information
• Blocks unwanted applications with an application control list we maintain—so you don't have to
• Provides device control so you can easily set rules for using removable storage devices
• Includes network access control that checks computers for security compliance, updates policies and cleans up threats
• Centrally deploys small and frequent updates—now up to 41% faster—without affecting network bandwidth and system performance
• I ncludes 24-hour expert support, one-on-one assistance, anti-malware updates and product upgrades

What's New:

Key new features

Sophos Endpoint Security and Control protects all your computers and data faster and better than any other vendor — without stretching your antivirus budget. With it, you can simplify cross-platform security, centralize management, prevent data loss and control devices, applications and network access to secure your business and comply with regulations.

Threat protection

• Detects and removes viruses, spyware, rootkits, Trojans, adware and potentially unwanted applications (PUAs). Independent tests show we have the most effective threat detection of any major vendor
• Uses live, cloud-based protection to check suspicious files against our database, so you’ll stop malware before it can run
• Identifies new threats, cleans them up and minimizes the number of false positives using our practical host intrusion prevention system (HIPS)
• Block access to websites hosting malicious code with Live URL Filtering
• Block hackers and prevent intrusion with a centrally managed firewall integrated in a single endpoint agent
• Assess managed and guest computers for out-of-date security and patch status before they join your network
• Get the latest protection with small, frequent, automatic updates from SophosLabs — now up to 41% faster with Endpoint 9.7

Data loss prevention

• Prevent the accidental loss of sensitive information with a unique and simple approach to DLP, that integrates scanning into the antivirus agent reducing the need for a separate software installation
• Monitors the transfer of sensitive data to removable storage devices and web-enabled applications
• Block installation and use of unwanted applications that can lead to data loss. Our new data control right helps you decide who can view data control events and alerts in Sophos Enterprise Console helping you to comply with privacy regulations

Simplified management

• One dashboard lets you see endpoint protection status, events and actions across all supported platforms — Windows, Mac, Linux, UNIX and virtualized platforms.
• Protects new computers on your network automatically through ActiveDirectory synchronization
• We install everything you need for your management server — no separate database or driver installation required.
• We make it easy to find computers and deploy antivirus — we even give you a choice of methods including Active Directory. And our installation wizard includes a built in removal tool to automatically uninstall your current antivirus
• Fix problems, configure updates, clean up remotely, schedule reporting and apply policies in a few simple steps

Trusted performance and support

• Minimizes the impact on computer performance, with our single scanning engine that independent testers rate as the fastest of any major security vendor — now up to 15% faster with Endpoint 9.7
• Free, constant, automatic updates and upgrades for new releases, and around-the-clock in-house technical support
• Gain the knowledge and experience of a recognized market leader in endpoint protection

Features & Benefits:

Block threats, not productivity

We make it simple for you to keep your users safe without getting in the way of their work. Our fast scanning engine takes care of everything, and it's now up to 15% faster than before:

• Uses live, cloud-based protection to check suspicious files against our database, so you'll stop malware before it runs
• Identifies new threats, cleans them up and minimizes the number of false positives using our practical host intrusion prevention system (HIPS)
• Provides endpoint protection for your roaming users, with our cloud anti-malware and URL filtering service
• Delivers automatic updates to your mobile workers from the nearest and best location, which saves you bandwidth and keeps them protected
• Downloads small, frequent updates that reduce impact on computer performance and your network bandwidth — and now those updates are 41% faster
• Improves performance by automatically slowing scans down when computer usage is high and speeding scans up when usage is low; plus, we scan only files that have changed since the user last accessed the computer
• Makes sure that all computers allowed to connect to your network meet your security policies

Prevent data loss

With our built-in data loss prevention, you'll make sure that only the right people have access to your organization's sensitive information:

• Monitors the transfer of sensitive data to removable storage devices and web-enabled applications
• Supplies an extensive library of prepackaged data definitions of sensitive and personally identifiable information (PII), so you save time on creating your own lists
• Enables you to set policies that control which removable devices and network interfaces people can use
• Performs DLP scanning and policy enforcement using our single endpoint agent
• Provides enhanced tamper protection that stops your users from turning off DLP scanning, application and device control, antivirus, firewall and more
• Provides application control lists you can use to easily block installation and use of unwanted applications that can lead to data loss
• Helps you comply with privacy regulations via our data control right, which lets you decide who can view data control events and alerts in the Sophos Enterprise Console

Free up your time

Setting up the security you need is easy, and maintaining your protection takes practically no time at all. And, we make switching security vendors easy too:

• Includes an installation wizard with a built-in removal tool that will automatically uninstall your current antivirus
• Installs everything you need for your management server—no separate database or driver installation required
• Makes it easy to find computers and deploy antivirus—we even give you a choice of methods, including our award winning Active Directory integration
• Provides one dashboard that lets you see endpoint protection status, events and actions across all supported platforms
• Enables you to create a security policy once and then deploy it across multiple groups
• Automatically protects new computers on your network through Active Directory synchronization
• Lets you disinfect users' computers quickly from our central console
• Provides role-based administration that lets you share and delegate responsibility for actions, such as cleaning up infections
• Allows you to configure and schedule reports so everyone gets the information they need, when they need it
• Monitors and responds to threat outbreaks as they happen—our global team of security experts is always on watch

Software components:

Enterprise Console
A single, automated console for Windows, Mac, UNIX and Linux that centrally deploys and manages: antivirus and client firewall protection; intrusion prevention; data, device and application control; and endpoint assessment and control.

Sophos Anti-Virus
A single endpoint agent detects viruses, spyware and adware, rootkits and suspicious files and behavior; monitors the transfer of sensitive data off the network; and controls use of removable storage devices and unauthorized applications

Sophos NAC
A network access control solution assesses managed, unmanaged and unauthorized computers; detects configuration issues, such as out-of-date antivirus protection or a disabled firewall; and fixes issues before

Sophos Client Firewall
A centrally managed client firewall designed for the enterprise environment blocks worms, stops hackers and prevents intrusions.

Sophos Mobile Security
Antivirus and anti-spyware protect Windows Mobile smartphones and PDAs.

Simple pricing and licensing
One license protects you across Windows, Mac, Linux, UNIX and virtualized platforms. It also includes 24-hour technical support and constant automatic updates and upgrades for new releases.

Platforms Supported:

Sophos Anti-Virus

• Windows
  Windows 7/Vista/XP Home SP1a and above/Pro SP1a and above/2000 and 2000 Pro SP3 and above/95/98/NT/ Windows XPe/Windows Netbooks/ Windows Embedded Standard/ WePOS/Mobile/Server 2003/2003 R2/Server 2008 incl. Core/2008 R2 incl. Core
• VMware
  VMware 4.x/vSphere 4/ESX 3.0, 3.5/ Worskstation 6.5/7.0 Server 1.0/2.0
• Hyper-V
  Microsoft Hyper-V Server 2008
• Citrix
  Citrix XenServer 5.0/5.5/5.6
• Non-Windows platforms
  Mac OS X/Linux/UNIX/NetApp Storage Systems/EMC/OpenVMS/ NetWare

Sophos NAC

• Windows
  Windows 7/Vista/XP Pro SP1 and above/2000/Server 2003/2003 R2/ Server 2008/2008 R2

Sophos Client Firewall

• Windows
  Windows 7/Vista/XP Home SP1a+ and Pro SP1a+/2000 Pro SP3+

Enteprise Console

Management server

• Windows
  Windows 7 (incl. XP mode)/ Server 2008/2008 R2/Server 2003/2003 R2
• VMware
  VMware 4.x/vSphere 4/ESX 3.0, 3.5/ Worskstation 6.5/7.0 Server 1.0/2.0
• Hyper-V
  Microsoft Hyper-V Server 2008
• Citrix
  Citrix XenServer 5.0/5.5/5.6

Remote console

• Windows
  Windows 7 (incl. XP mode)/ Server 2008/2008 R2/Server 2003/2003 R2/Vista/XP Pro
• VMware
  VMware 4.x/vSphere 4/ESX 3.0, 3.5/ Worskstation 6.5/7.0 Server 1.0/2.0
• Hyper-V
  Microsoft Hyper-V Server 2008
• Citrix
  Citrix XenServer 5.0/5.5/5.6

Platforms managed

• Windows
  Windows 7/Vista/XP/2000/98/95/ NT4/Server 2008* incl. Core/Server 2003
• Mac OS X
  Versions 10.4/10.5 /10.6
• Linux**
• UNIX**

Languages supported

• English, French, German, Italian, Japanese, Spanish, Simplified Chinese and Traditional Chinese

Note: Not all functionality/language support is available on all platforms.

Platforms supported	x86 32-bit	x86 64-bit	IA-64 (Itanium) 64-bit	Minimum disk space	Minimum memory
Sophos Anti-Virus for Windows
Windows 7 including XP mode				500 MB	256 MB
Windows Vista				500 MB	256 MB
Windows Server 2008 R2 including Core				500 MB	256 MB
Windows Server 2008 including Core				500 MB	256 MB
Windows XP Home SP1a and above				500 MB	256 MB
Windows XP Pro SP1a and above				500 MB	256 MB
Windows Server 2003				500 MB	256 MB
Windows Server 2003 R2				500 MB	256 MB
Windows 2000 SP3				500 MB	256 MB
Windows 2000 Pro SP3 and above				500 MB	256 MB
Windows Netbooks				500 MB	256 MB
Windows XPe SP1a and above*				500 MB	256 MB
Windows Embedded Standard*				500 MB	256 MB
WePOS SP2				500 MB	256 MB
*For further details on support provided, please see the following Knowledgebase article
Virtualization platforms supported
vSphere 4.x				500 MB	256 MB
VMWare ESX 3.0/3.5				500 MB	256 MB
VMWare Workstation 6.5, 7.0				500 MB	256 MB
VMWare Server 1.0/2.0				500 MB	256 MB
Microsoft Hyper-V Server 2008				500 MB	256 MB
Citrix XenServer 5.0/5.5/5.6				500 MB	256 MB
Sophos Client Firewall
Requires Pentium class 300 MHz processor
Windows 7				100 MB	320 MB
Windows Vista				100 MB	320 MB
Windows XP Pro SP1a+				100 MB	320 MB
Windows XP Home SP1a+				100 MB	320 MB
Windows 2000 Pro SP3+				100 MB	320 MB
NAC Agent
Windows 7				20 MB	512 MB
Windows Vista				20 MB	512 MB
Windows Server 2008				20 MB	512 MB
Windows Server 2008 R2				20 MB	512 MB
Windows XP Pro SP1 and above				20 MB	512 MB
Windows Server 2003				20 MB	512 MB
Windows Server 2003 R2				20 MB	512 MB
Windows 2000 SP4				20 MB	512 MB

* Including AMD64 and Itanium 64-bit versions
** For full details, visit www.sophos.com.

Documentation:

Sophos Endpoint Security and Control Data Sheet (.PDF)