Sophos Endpoint Security and Data Protection
All-in-one malware and data protection

| Sophos Products | ||
|---|---|---|
| Endpoint Security & Data Protection - 1 Year | ||
| Sophos Endpoint Security & Data Protection, 10-14 Users, 1 Year *Price per user. Quantity must be 10 or greater |
#ESDE1UBDP List Price: $112.50 Our Price: $101.25 |
|
| Sophos Endpoint Security & Data Protection, 15-24 Users, 1 Year *Price per user. Quantity must be 15 or greater |
#ESDF1UBDP List Price: $87.50 Our Price: $78.75 |
|
| Sophos Endpoint Security & Data Protection, 25-49 Users, 1 Year *Price per user. Quantity must be 25 or greater |
#ESDG1UBDP List Price: $68.75 Our Price: $61.88 |
|
| Sophos Endpoint Security & Data Protection, 50-99 Users, 1 Year *Price per user. Quantity must be 50 or greater |
#ESDH1UBDP List Price: $59.75 Our Price: $53.78 |
|
| Sophos Endpoint Security & Data Protection, 100-199 Users, 1 Year *Price per user. Quantity must be 100 or greater |
#ESDJ1UBDP List Price: $51.50 Our Price: $46.35 |
|
More pricing and licensing options below!
Overview:
Sophos Endpoint Security and Data Protection offers a single integrated solution for both Key benefits anti-malware and data protection. A single agent delivers anti-virus and anti-spyware protection, client firewall, data loss prevention (DLP) content monitoring, management of removable storage devices and detects and blocks unauthorized software. Combined with integrated network access control (NAC) and encryption to ensure policy compliance and secure your data, it gives you the best preventive endpoint and data protection, saving you time, money and resources. A single license means you can protect all users and computers across Windows, Mac, Linux, UNIX and other non- Windows platforms.
Key Benefits
- Eliminates known and unknown threats with a single, centralized solution
- Detects and removes viruses, spyware, rootkits, Trojans, adware and potentially unwanted applications (PUAs)
- Live checks against SophosLabs reputation database protect against new and unseen threats
- Scans for sensitive information being transferred off the network without requiring a separate agent
- Lets you instantly identify vulnerable computers to check compliance, update policies and clean up threats
- Prevents the loss of data by encrypting devices and information
- Controls applications that can adversely impact network and user productivity, such as VoIP and IM
- Allows assessment of the security status of managed and unmanaged computers
- Enforces protection against unknown users gaining access to your network
- Lets you rapidly create and update security policies, and deploy them across multiple groups simultaneously
- Centrally deploys small and frequent updates that don’t impact network bandwidth or system performance
- Allows automatic deployment to new computers through Active Directory synchronization
- Reduces administrator workload with its ability to share specific tasks with other teams through configurable role-based administration
- Enables a wide range of customized, graphical reports to be created, scheduled to run and automatically emailed
- Includes 24x7x365 support for the duration of the license and one-on-one assistance

What's New:
Endpoint Security and Control 9.5
This upcoming release focuses on delivering even more features to protect you against threats
Key new features
Live Anti-Virus
- Improves proactive detection, reducing reliance on updating by stopping previously unseen threats faster
- Instantly checks the reputation of suspicious files against an extensive in-the-cloud database of known good and bad reputation data
- Shares threat reputation data between SophosLabs, products and customers, meaning you benefit from even greater threat protection
Live URL Filtering
- Protects endpoints that are accessing the internet via home or public Wi-Fi networks and not going through a gateway web appliance
- Blocks mobile/remote endpoints from accessing URLs classified by SophosLabs as hosting malicious software or malicious code
- Live lookups to the SophosLabs malicious URL database protects against millions of compromised sites
Tamper protection
- Prevents users from uninstalling key Sophos protection components on an endpoint, such as anti-virus, client firewall or updating
- Policies can be applied to different groups of computers allowing you to set different passwords by group as required
Platform enhancements
- Server support for both Windows 7 and Windows Server 2008 R2
- Sophos Client Firewall support for 64-bit Windows computers
- Full 32- and 64-bit server and agent support for Sophos NAC
- Support for Microsoft Hyper-V 2008 and vSphere 4
Features & Benefits:
Fast and preventive protection
A unified single client blocks malware, adware, suspicious files and behavior, removable storage devices and unauthorized software such as IM, VoIP, P2P and games, and provides content-aware DLP monitoring for the transfer of sensitive information. Its fast scanning engine, built-in intrusion prevention and live in-the-cloud protection technologies combine to detect new and zero-day threats without the need for a malware signature update. Integrated network access control functionality ensures all computers connecting to the network meet your security standards.
Comprehensive data protection
The combination of a number of different technologies ensures that your data is protected against accidental loss. Content scanning integrated into the single agent ensures that all sensitive data being transferred by users to removable storage devices and internet-enabled applications such as email or instant messaging is detected and can be audited. Granular control of removable storage devices enables you to allow the use of specific devices, enforce the use of encrypted devices or simply allow read-only access. And full disk encryption secures your data on computers, preventing information from getting into the wrong hands if devices are lost.
Simplified and automated management
Our management console reduces administrative burden by automating the deployment of protection, and simplifying policy management and reporting. The dashboard provides instant visibility of the protection status and events across Windows, Mac, Linux and UNIX platforms, and enables the centralized cleanup of malware; and fixes non-compliant computers. Rolebased administration enables you to share specific tasks such as clean up with the help desk team and scheduled reporting means that specific reports can be emailed automatically to the people who need them.
Faster, low-impact protection
One scan with our single anti-virus client detects viruses, spyware and adware, suspicious behavior and files, removable storage devices and unauthorized applications. The client will also detect when users try to transfer sensitive data to removable storage devices and internetenabled applications such as email and instant messaging.
- Sophos updates are small in size and are released frequently—an advantage for companies wanting fast protection with low impact on network resources—and protection is enhanced Sophos Live Protection that reduces the gap between updates even further.
- Decision Caching™ technology improves on-access scanning performance by intercepting and scanning only the files that have changed since the system was accessed last.
- SophosLabs™ signatures control applications that can adversely impact network and user productivity, such as VoIP and IM.
Effective zero-day protection
Sophos combines proactive protection technologies to automatically guard against new and targeted threats eliminating the reliance on updates and without complex installation and configuration as SophosLabs do the fine tuning.
- The endpoint agent combines both pre-execution and runtime detection to create profiles of file characteristics, ensuring the accurate identification of malware and minimizing the chance of false positives. As soon as a file matches any existing malware profile the process is stopped and the threat cleaned up.
- Sophos Live Anti-Virus provides fast and effective detection of zero-day threats by instantly checking suspicious files against an extensive in-the-cloud database of known good and bad data.
- Sophos Live URL Filtering protects your roaming users from infection from websites with automatic in-the-cloud URL checks against the SophosLabs database of millions of compromised websites and blocking access to sites that are known to be hosting malware.
Protecting against accidental loss of data
Sophos Endpoint Security and Data Protection delivers a number of components that combine to protect your data against loss and help you to meet your compliance needs:
- Content-aware DLP scanning—integrated into the engine—monitors the transfer of sensitive data to removable storage devices and internet-enabled applications. It uses an extensive library of data definitions supplied by SophosLabs, reducing the burden of manually creating and maintaining lists yourself.
- Flexible, granular control of removable storage devices allows the authorization of specific devices, enforcement of encrypted devices or even just read-only access, as well as control over network interfaces like 3G modems.
- Prevents the installation and use of unwanted applications such as P2P and IM clients that can act as means for sensitive data transfer. A comprehensive list of applications supplied and maintained by SophosLabs™ removes the need for administrators to add new applications or manually update detection of new versions.
- Full disk encryption secures data on computers by encrypting the entire hard drive without impacting your users. Installation can be carried out on a standalone machine or unattended across your organization via your existing deployment tool. Forgotten passwords can be easily recovered either through local self-help or by using a secure challenge response process. Users can also easily and secure share data with third parties using encryption features integrated into Windows Explorer and email clients.
Preventive protection reduces risk of infection
By identifying managed and unmanaged computers with potential security flaws, such as out-of-date anti-virus protection or a disabled firewall, you can reduce the risk of infection. You can choose to either block non-compliant computers or ensure that security is improved to meet a required standard before allowing access.
- Default policies check if anti-virus and client firewall protection is active and up to date on managed and unmanaged computers.
- Sophos NAC agent checks if Microsoft operating system service packs are installed, and that Microsoft/Windows Update is enabled.
- Enforcement options ensure that unauthorized computers are not granted access to your network.
Simplifying deployment and administration
Sophos Enterprise Console™ simplifies management of Windows, Mac, Linux and UNIX protection, by centralizing deployment, updating, reporting and security policy enforcement. It manages endpoint and client firewall protection as well as endpoint assessment and control, providing unrivalled visibility of the security status of your entire network.
- The console synchronizes with Active Directory to ensure your chosen security policy is automatically enforced as new computers join your network.
- Outbreak and data risk levels across the entire network are displayed on the security dashboard and automatic email alerts are sent when your chosen security thresholds are threatened.
- Protection is automatically updated frequently—and because you control the download rate, you can preserve bandwidth.
- Endpoint computers can be completely disinfected in a single, simple operation from the console.
- ActivePolicies in the console allows you to create a policy once and then apply it across multiple groups, on Windows, Mac, Linux and UNIX computers. Policies cover updating schedules, anti-virus and HIPS, client firewall, data control, device control, application control and NAC.
- Specific roles can be configured to enable responsibility for specific actions like cleanup or management areas of the network, such as remote offices, to be delegated through role-based administration.
- Out-of-the-box compliance reports are provided and a reporting wizard enables administrators to create and customize reports that can be scheduled and emailed to selected recipients with threat alerts and infections.

Trusted support from the experts
All Sophos products are supported by experienced Sophos teams who are on hand to ensure that you benefit from the best protection and the maximum return on investment.
- Highly skilled analysts in SophosLabs, our global network of threat analysis centers, provide proactive rapid protection against known and unknown threats.
- Through technology, global visibility of emerging threats and integrated threat expertise, SophosLabs provides the 24x7 research and fast global response your organization needs to protect it from increasingly complex threats.
- Our around-the-clock technical customer support operation is included as standard in every license and provides access to our in-house customer support team.
- Our support engineers provide one-to-one support by email or telephone, or you can take advantage of our web-based support knowledgebase.
- The Sophos Professional Services team can demonstrate how to get the most out of Sophos products by optimizing your implementation.
Simple pricing and licensing
- A single license covers all users and computers across Windows, Mac, Linux, UNIX and other non-Windows platforms.
- Subscription-based licensing entitles you to protection, management and product updates as well as technical support.
- Sophos Web Security and Control, Sophos Email Security and Data Protection, and Sophos NAC Advanced services can all be included in one license.
Software components:
Enterprise Console
A single, automated console for Windows, Mac, UNIX and Linux that centrally deploys and manages: antivirus and client firewall protection; intrusion prevention; data, device and application control; and endpoint assessment and control
Sophos Anti-Virus
A single anti-virus client that detects viruses, spyware and adware, rootkits, suspicious files and suspicious behavior; scans for the transfer of sensitive data; controls the use of removable storage devices and unauthorized VoIP, IM, P2P and gaming software
Sophos NAC
A network access control solution that assesses managed, unmanaged and unauthorized computers to detect configuration issues, such as out-ofdate anti-virus protection or a disabled firewall, and fixes them before allowing access
Sophos Client Firewall
A centrally managed client firewall designed for the enterprise environment that blocks worms, stops hackers and prevents intrusion from hackers
Sophos Mobile Security
Anti-virus and anti-spyware protection for Windows Mobile smartphones and PDAs
Sophos SafeGuard Disk Encryption
Full disk encryption with secure preboot authentication and a full set of password and machine recovery tools
SafeGuard PrivateCrypto
Encryption of data on removable storage devices and secure information exchange with third parties
Technology bytes:
ActivePolicies
Lets you create a new security policy
once and then deploy it across multiple
groups simultaneously
Application Control
Allows you to selectively authorize or
block legitimate applications that impact
network bandwidth, system availability,
and user productivity
Behavioral Genotype Protection
Delivers the benefits of a Host Intrusion
Prevention System (HIPS), guarding
against unknown threats by analyzing
behavior before code executes
Centralized cleanup
Lets you deal with malware and PUAs
remotely from a central location, saving
time and money
Data Loss Prevention
Allows you to monitor the transfer of
sensitive data such as PII to storage
devices and applications using an
extensive library of global sensitive data
definitions supplied and updated by
SophosLabs
Decision Caching
Provides performance-enhanced onaccess
scans by ensuring that only those
files that have changed are scanned
Device Control
Helps you control the use of removable
storage, optical media drives and wireless
networking protocols
Live Protection
In-the-cloud technology providing
protection against the very latest threats
without the need for an update and
blocking access to malicious websites
Genotype technology
Provides proactive protection from new
variants of virus and spam families,
even before specific, signature-based
protection becomes available
Smart Views
Lets you instantly focus on vulnerable
computers—including remote
computers—to check compliance, update
policies and clean up threats
Sophos AutoUpdate
Offers failsafe updating and can throttle
bandwidth when updating over low-speed
network connections
Rootkit detection and cleanup
Integrated rootkit detection that finds and
removes any rootkit hidden on desktop
computers
Stealth mode
Lets Sophos Client Firewall prevent
computers fom responding and falling
victim to hacker attacks
Platforms Supported:
Sophos Anti-Virus
-
Windows
Windows 7/Vista/XP Home and Pro/2000 and 2000 Pro/95/98/NT/ Windows XPe/Windows Netbooks/ Windows Embedded Standard/WePOS/ Mobile/Server 2003/2003 R2/Server 2008 incl. Core /2008 R2 including Core - VMware
vSphere 4/ESX 3.0, 3.5/Workstation 6.5/ Server 1.0 - Hyper-V
Microsoft Hyper-V 2008 - Non-Windows platforms
Mac OS X/Linux/UNIX/NetApp Storage Systems/EMC/OpenVMS/NetWare
Sophos NAC
- Windows
Windows 7/Vista/XP/2000/Server 2003/2003 R2/Server 2008/Server 2008 R2
Sophos Client Firewall
- Windows
Windows 7/Vista/XP Pro or Home/2000 Pro
Enteprise Console
Management server
- Windows
Windows 7 (incl. XP mode) Server 2008/2008 R2/Server 2003/2003 R2 - VMware
vSphere 4/ESX 3.0, 3.5/Workstation 6.5/ Server 1.0 - Hyper-V
Microsoft Hyper-V 2008
Remote console
- Windows
Windows 7 (incl. XP mode) Server 2008/2008 R2/Server 2003/2003 R2/Vista/XP Pro - VMware
vSphere 4/ESX 3.0, 3.5/Workstation 6.5/ Server 1.0 »» Hyper-V Microsoft Hyper-V 2008
Platforms managed
- Windows
Windows 7/Vista/XP/2000/98/ 95/NT4/Server 2008* incl. Core/ Server 2003 - Mac OS X
Versions 10.4/10.5 /10.6 - Linux**
- UNIX**
Safeguard Disk Encryption
- Windows
Windows 7/Vista/XP
Safeguard PrivateCrypto
- Windows
Windows 7/Vista/XP/2000/Windows 7/ Vista/XP/2000
Languages supported
- English, French, German, Italian, Japanese, Spanish, Simplified Chinese and Traditional Chinese
Note: Not all functionality/language support is available on all platforms.
| Platforms supported | x86 32-bit | x86 32-bit | IA-64 (Itanium) 64-bit |
Minimum disk space |
Minimum memory |
| Sophos Anti-Virus for Windows | |||||
| Windows 7 including XP mode | 500 MB | 256 MB | |||
| Windows Vista | 500 MB | 256 MB | |||
| Windows Server 2008 R2 including Core | 500 MB | 256 MB | |||
| Windows Server 2008 including Core | 500 MB | 256 MB | |||
| Windows XP Home SP1a and above | 500 MB | 256 MB | |||
| Windows XP Pro SP1a and above | 500 MB | 256 MB | |||
| Windows Server 2003 | 500 MB | 256 MB | |||
| Windows Server 2003 R2 | 500 MB | 256 MB | |||
| Windows 2000 SP3 | 500 MB | 256 MB | |||
| Windows 2000 Pro SP3 and above | 500 MB | 256 MB | |||
| Windows Netbooks | 500 MB | 256 MB | |||
| Windows XPe SP1a and above* | 500 MB | 256 MB | |||
| Windows Embedded Standard* | 500 MB | 256 MB | |||
| WePOS SP2 | 500 MB | 256 MB | |||
| *For further details on support provided, please see the following Knowledgebase article | |||||
| Virtualization platforms supported | |||||
| vSphere 4.x | 500 MB | 256 MB | |||
| VMWare ESX 3.0/3.5 | 500 MB | 256 MB | |||
| VMWare Workstation 6.5, 7.0 | 500 MB | 256 MB | |||
| VMWare Server 1.0/2.0 | 500 MB | 256 MB | |||
| Microsoft Hyper-V Server 2008 | 500 MB | 256 MB | |||
| Citrix XenServer 5.0/5.5/5.6 | 500 MB | 256 MB | |||
| Sophos Client Firewall | |||||
| Requires Pentium class 300 MHz processor | |||||
| Windows 7 | 100 MB | 320 MB | |||
| Windows Vista | 100 MB | 320 MB | |||
| Windows XP Pro SP1a+ | 100 MB | 320 MB | |||
| Windows XP Home SP1a+ | 100 MB | 320 MB | |||
| Windows 2000 Pro SP3+ | 100 MB | 320 MB | |||
| NAC Agent | |||||
| Windows 7 | 20 MB | 512 MB | |||
| Windows Vista | 20 MB | 512 MB | |||
| Windows Server 2008 | 20 MB | 512 MB | |||
| Windows Server 2008 R2 | 20 MB | 512 MB | |||
| Windows XP Pro SP1 and above | 20 MB | 512 MB | |||
| Windows Server 2003 | 20 MB | 512 MB | |||
| Windows Server 2003 R2 | 20 MB | 512 MB | |||
| Windows 2000 SP4 | 20 MB | 512 MB | |||
| SafeGuard PrivateCrypto for file-based encryption | |||||
| Windows 7 | 20 MB | 512 MB | |||
| Windows Vista | 20 MB | 512 MB | |||
| Windows XP Home SP2+ | 20 MB | 512 MB | |||
| Windows XP Pro SP2+ | 20 MB | 512 MB | |||
| Windows 2000 SP4+ | 20 MB | 512 MB | |||
| Sophos SafeGuard Disk Encryption for full-disk encryption | |||||
| Windows 7 | 300 MB | 1 GB | |||
| Windows Vista SP1+ | 300 MB | 1 GB | |||
| Windows XP Home SP2+ | 300 MB | 512 MB | |||
| Windows XP Pro SP2+ | 300 MB | 512 MB | |||
* Including AMD64 and Itanium 64-bit versions
Documentation:
![]()
Sophos Endpoint Security and Data Protection Data Sheet (.PDF)
![]()
Sophos ESDP 9.5 - What's New (.PDF)
| Sophos Products |
|---|
| Sophos Endpoint Security & Data Protection, 10-14 Users, 1 Year *Price per user. Quantity must be 10 or greater |
#ESDE1UBDP List Price: $112.50 Our Price: $101.25 |
|
| Sophos Endpoint Security & Data Protection, 15-24 Users, 1 Year *Price per user. Quantity must be 15 or greater |
#ESDF1UBDP List Price: $87.50 Our Price: $78.75 |
|
| Sophos Endpoint Security & Data Protection, 25-49 Users, 1 Year *Price per user. Quantity must be 25 or greater |
#ESDG1UBDP List Price: $68.75 Our Price: $61.88 |
|
| Sophos Endpoint Security & Data Protection, 50-99 Users, 1 Year *Price per user. Quantity must be 50 or greater |
#ESDH1UBDP List Price: $59.75 Our Price: $53.78 |
|
| Sophos Endpoint Security & Data Protection, 100-199 Users, 1 Year *Price per user. Quantity must be 100 or greater |
#ESDJ1UBDP List Price: $51.50 Our Price: $46.35 |
|
| Sophos Endpoint Security & Data Protection, 200-499 Users, 1 Year *Price per user. Quantity must be 200 or greater |
#ESDK1UBDP List Price: $43.00 Our Price: $38.70 |
|
| Sophos Endpoint Security & Data Protection, 500-999 Users, 1 Year *Price per user. Quantity must be 500 or greater |
#ESDL1UBDP List Price: $34.25 Our Price: $30.83 |
|
| Sophos Endpoint Security & Data Protection, 1,000-1,999 Users, 1 Year *Price per user. Quantity must be 1,000 or greater |
#ESDM1UBDP List Price: $34.25 Our Price: $30.83 |
|
For more than 2,000 Users and 4 - 5 Years, please use Quote Request Form! |
||
| Sophos Endpoint Security & Data Protection, 10-14 Users, 2 Years *Price per user. Quantity must be 10 or greater |
#ESDE2UBDP List Price: $168.75 Our Price: $151.88 |
|
| Sophos Endpoint Security & Data Protection, 15-24 Users, 2 Years *Price per user. Quantity must be 15 or greater |
#ESDF2UBDP List Price: $131.25 Our Price: $118.13 |
|
| Sophos Endpoint Security & Data Protection, 25-49 Users, 2 Years *Price per user. Quantity must be 25 or greater |
#ESDG2UBDP List Price: $103.13 Our Price: $92.82 |
|
| Sophos Endpoint Security & Data Protection, 50-99 Users, 2 Years *Price per user. Quantity must be 50 or greater |
#ESDH2UBDP List Price: $89.63 Our Price: $80.67 |
|
| Sophos Endpoint Security & Data Protection, 100-199 Users, 2 Years *Price per user. Quantity must be 100 or greater |
#ESDJ2UBDP List Price: $77.25 Our Price: $69.53 |
|
| Sophos Endpoint Security & Data Protection, 200-499 Users, 2 Years *Price per user. Quantity must be 200 or greater |
#ESDK2UBDP List Price: $64.50 Our Price: $58.05 |
|
| Sophos Endpoint Security & Data Protection, 500-999 Users, 2 Years *Price per user. Quantity must be 500 or greater |
#ESDL2UBDP List Price: $51.38 Our Price: $46.24 |
|
| Sophos Endpoint Security & Data Protection, 1,000-1,999 Users, 2 Years *Price per user. Quantity must be 1,000 or greater |
#ESDM2UBDP List Price: $51.38 Our Price: $46.24 |
|
For more than 2,000 Users and 4 - 5 Years, please use Quote Request Form! |
||
| Sophos Endpoint Security & Data Protection, 10-14 Users, 3 Years *Price per user. Quantity must be 10 or greater |
#ESDE3UBDP List Price: $225.00 Our Price: $202.50 |
|
| Sophos Endpoint Security & Data Protection, 15-24 Users, 3 Years *Price per user. Quantity must be 15 or greater |
#ESDF3UBDP List Price: $175.00 Our Price: $157.50 |
|
| Sophos Endpoint Security & Data Protection, 25-49 Users, 3 Years *Price per user. Quantity must be 25 or greater |
#ESDG3UBDP List Price: $137.50 Our Price: $123.75 |
|
| Sophos Endpoint Security & Data Protection, 50-99 Users, 3 Years *Price per user. Quantity must be 50 or greater |
#ESDH3UBDP List Price: $119.50 Our Price: $107.55 |
|
| Sophos Endpoint Security & Data Protection, 100-199 Users, 3 Years *Price per user. Quantity must be 100 or greater |
#ESDJ3UBDP List Price: $103.00 Our Price: $92.70 |
|
| Sophos Endpoint Security & Data Protection, 200-499 Users, 3 Years *Price per user. Quantity must be 200 or greater |
#ESDK3UBDP List Price: $86.00 Our Price: $77.40 |
|
| Sophos Endpoint Security & Data Protection, 500-999 Users, 3 Years *Price per user. Quantity must be 500 or greater |
#ESDL3UBDP List Price: $68.50 Our Price: $61.65 |
|
| Sophos Endpoint Security & Data Protection, 1,000-1,999 Users, 3 Years *Price per user. Quantity must be 1,000 or greater |
#ESDM3UBDP List Price: $68.50 Our Price: $61.65 |
|
For more than 2,000 Users and 4 - 5 Years, please use Quote Request Form! |
||

