Sophos WS500 Web Appliance
Complete Web Protection Everywhere
Our purpose-built secure web gateway makes web protection simple. It provides advanced protection from today’s sophisticated web malware and gives you full control over your employees’ online activity. You can easily create policies for individuals or groups while gaining important insights into user activity on your network.
- Protect users from new zero-day threats
- Be up and running in just 10 minutes
- Easily accommodates user requests and custom policies
- Extend protection to offsite users easily
- Email scheduled reports directly to managers
- Deploy hardware or VMware-Ready appliances
Advanced protection from web malware
Customizable URL Filtering boosts productivity
Our continuously updated database contains billions of pages in 56 categories. This lets you create safe web browsing policies, minimizing legal concerns around inappropriate content and maximize productivity. Easily set up policy by user or group using a variety of authentication options including SSO with Active Directory or eDirectory and even using our new captive portal for shared systems or mobile devices.
Control rogue users and enforce safe search
We not only block common anonymizing proxy sites, but also offer the ability to dynamically identify proxy abuse in real-time. Put a stop to rogue users attempting to bypass your policy using home-based or obscure proxies. You can also activate safe search and even monitor inappropriate search terms to keep your environment safe.
Rich reporting provides unrivalled insight
You get detailed reports as standard, stored locally with no separate products or appliances required. Predefined and customizable reports with extensive drill-down capabilities show key web activity like domains visited and bandwidth consumed.
Extend your protection everywhere
Add Sophos Endpoints to extend your protection everywhere your users go. Our unique endpoint integration packs the full power of our web appliance into the Sophos Endpoint. You get full web malware protection and policy enforcement off the network with no need to backhaul traffic or use a VPN. Policy and reporting syncs between endpoints and the gateway through the cloud, while the Sophos Endpoint agent performs scanning and enforcement.
Dedicated or Unified
With Sophos, you have your choice of a dedicated purpose-built web appliance, or a secure web gateway integrated into your UTM.
Our Sophos Web Appliance is ideal if you want an appliance dedicated to web security with streamlined workflow and policy tools. However, if you’re interested in consolidating your network security into a single appliance, our UTM with integrated web protection is for you.
Both offer all the great features below, including our unique Web and Endpoint integration to provide complete web protection everywhere.
Advanced Threat Protection
With our Secure Web Gateway, you get the most advanced web threat protection:
- Our high-performance web malware engine inspects all web traffic in real-time
- SophosLabs continuously updates our threat intelligence via the cloud, keeping you ahead of new and emerging threats
Real-Time Reputation Filtering
SophosLabs identifies over 30,000 newly infected websites daily. You’re protected from all of them.
Real-time reputation filtering protects you from newly infected websites as soon as they come online. We do this using our ever-growing, cloud-hosted database of malicious sites.
Customizable Web Filtering
Select from billions of sites in 56 categories to create safe web browsing policies. You can minimize legal concerns around inappropriate content and maximize productivity.
You can set policy by users and time, using a variety of authentication options including IP Address, Active Directory SSO, eDirectory SSO and LDAP.
Dynamic App Control
With our UTM web protection, you get complete control to block, allow, shape and prioritize web applications like file sharing, IM clients, streaming media and games.
Deep Layer-7 inspection identifies over 900 applications. And, you'll get feedback on unclassified applications too.
Monitor your web traffic in real time. In just a couple clicks you can maximize the bandwidth for what’s important, and minimize it for what’s not. For example, you can control YouTube and Facebook while accelerating Salesforce.
Our endpoint protection integrates with both our Sophos Web Appliances and UTMs, providing a unique and elegant solution for protection everywhere.
We’ve integrated the full power of our web protection into our endpoints. When users leave the office, they’re fully protected on the web without having to backhaul or use a VPN to get online safely.
Policy and reporting syncs through the cloud, so it’s like they never left.
At Sophos, simplicity is our mantra. You’ll have complete control over all the security features you need all in one place, with none of the complexity.
We've invested heavily in streamlining our interface. This way you won't have to reach for the manual every time you need to update a policy or change a setting. So you're never more than a couple clicks from completing your task.
Complete On-Box Reporting
Our built-in reporting means you’ll know exactly what's happening with your users. Fix problems fast and shape your policies, keeping your users secure while boosting network performance. And, you get detailed reports as standard, stored locally with no separate tools required.
At-a-glance flow graphs show usage trends with predefined and customizable reports, providing key web activity. Report anonymization hides user names, requiring the four-eyes-principle to unhide them.
Both our Sophos Web Appliances and UTMs are available as a virtual appliance or in a full range of hardware models to fit any business.
Install your dedicated or UTM secure web gateway as an explicit proxy or in transparent mode with easy Active Directory or eDirectory integration.
Centrally manage multiple Sophos Web Appliances with an optional Sophos Management Appliance for seamless policy replication and aggregate reporting across multiple locations.
We offer both a dedicated and UTM appliance options
Dedicated Sophos Web AppliancesHardware Appliance Models
|Recommended users||Up to 100||Up to 400||Up to 1,200||Up to 3,000|
|Processor||ULV Dual Core||Dual Core||Quad Core||Dual Hexa-Core|
|Hard drive||250 GB||250 GB||1 TB||4x 1TB (RAID 10)|
|Power supply||Single 100/240V||Single 100/240V||Single 100/240V||Dual Redundant hot-swap 460W 100/240V|
Additional hardware information
- Installation: 1U rack mount
- Regulatory/safety certification: UL, CE, FCC, VCCI, C-Tick, TUV-GS, SABS, RoHS, WEEE
- Hardware warranty: Up to 3-year advance replacement (subject to valid software licensing)
- Certifications: CIPA compliance, Network Testing Labs Award
|Sophos Virtual Web Gateway Applicance|
|Pre-defined profiles||Single User||Small||Medium||Large|
|Capacity||1 user||400 users||750 users||1,200 users|
|Recommended RAM||1 GB||2 GB||4 GB||8 GB|
|Recommended disk storage||41 GB||120 GB||160 GB||250 GB|
- VMware ESX/ESXi 3.5 or 4.x or ESXi 5.x
- VMware Workstation 6.5 or 7.x
Optional Sophos Management Appliance Models
Centralized management and reporting for all your hardware and virtual web appliances. Available in two hardware models or as a virtual appliance.
|Recommended users||Up to 2,000||Up to 15,000|
|Processor||Quad core||Quad core|
|Hard drive||1 TB||2 TB|
|Power supply||Single 100/240V||Dual hot-swap 100/240V|
UTM AppliancesHardware Appliance Models
|Appliance||UTM 110||UTM 120||UTM 220||UTM 320||UTM 425||UTM 525||UTM 625|
|Web Proxy Throughput||220 Mbps||220 Mbps||625 Mbps||1.25 Gbps||2 Gbps||1.8 Gbps||1.95 Gbps|
|Antivirus Throughput||50 Mbps||75 Mbps||235 Mbps||375 Mbps||1.3 Gbps||1.7 Gbps||3.6 Gbps|
Software appliances run on Intel-compatible PCs and servers.
Sophos UTM Certifications
- Westcoast Labs Checkmark Platinum Product Award
- SC Magazine
- InfoTech Research Group Vendor Landscape Award Champion
Sophos UTM virtual appliances are based on the software equivalent. Sophos UTM is the first unified threat management product to be certified as VMware Ready and Citrix Ready. It also runs in Microsoft Hyper-V and KVM virtual environments.
The virtual appliance can be downloaded from Sophos servers and burned independently on CD. A step-by-step deployment of each security component enables a secure migration path into a completely virtualized environment.
Minimum Hardware Requirements
- 1.5+ GHz processor
- 1 GB RAM
- 20 GB hard disk
- Bootable CD-ROM
- 2 or more network cards
- 1 GB RAM
- 40 GB IDE or SCSI hard disk drive
- 3 PCI-NICs (Internet, Local Net, Demilitarized Zone)
The Sophos UTM software appliance integrates all security applications with a hardened OS. These are bundled within a self-booting software image for easy deployment on intel-compatible hardware of your choice.
Performance results depend on the selected hardware. Best results are achieved when using hardware specifications at or beyond Intel Dual/Quad-Core CPUs >2GHz, 2GB RAM.
How to Buy:
Three simple steps will get you complete web protection that fits your business:
- Choose Dedicated or Unified
Choose a dedicated Sophos Web Appliance or Secure Web Gateway protection in our UTM.
- Choose How to Deploy
Hardware, software, virtual or cloud-based appliance
- Add Sophos Web Protected Endpoints
Add Endpoint Protection to extend your web protection to offsite users everywhere they go
You can read more about these steps below. And if you need help deciding what’s right for you, simply contact us or find a Sophos partner. We’ll both be happy to help.
Choose Dedicated or Unified
We offer two Secure Web Gateway product lines to best fit your needs.
- Dedicated Sophos Web Appliances
We offer a full line Sophos Web Appliances that will appeal to the IT Security Manager who wants a purpose-built appliance for web security with streamlined workflow and policy tools that makes administration easy.
You can choose to buy a Sophos Web Appliance and license Sophos Web Protection alone or as part of a Sophos Security Suite. Both Sophos Enduser Web Suite or Sophos Complete Security Suite include Sophos Web Protection (and you’ll get Endpoint, Mobile, Email, and Encryption too).
- UTM Secure Web Gateway
We also offer a powerful Secure Web Gateway integrated into our UTM appliances that will appeal to the IT Manager that’s interested in consolidating network security capabilities and managing them with a single console.
When buying a UTM appliance you get the flexibility to license our protection modules individually. Or, you can choose one of our pre-packaged licenses. For secure web gateway protection, you’ll need to license UTM Web Protection. You can buy this module alone, in combination with other UTM modules or get it as part of the Next-Gen Firewall or FullGuard licenses.
For Secure Web Gateway protection, you’ll need to license UTM Web Protection. You can buy this module alone, in combination with other UTM modules or get it as part of the Next-Gen Firewall or FullGuard licenses.
|Essential Firewall – Free Network Firewall, NAT, Native Windows Remote Access
|Network Protection IPSec/SSL VPN, Intrusion Prevention, DoS Protection
|Web Protection URL Filtering, Application Control, Dual Engine Antivirus
|Email Protection Anti-spam, Email Encryption, Dual Engine Antivirus
|Wireless Protection Wireless Controller, Multi-SSID Support, Captive Portal
|Webserver Protection Web Application Firewall, Reverse Proxy, Antivirus
|Endpoint Protection Antivirus, HIPS, Device Control
Choose How to Deploy
Choose the right appliance for your environment–is it hardware, software, virtual or even cloud-based?
A full range of hardware models are available in both our dedicated and UTM appliance lines that offer full secure web gateway capabilities to fit any business.
Dedicated Sophos Web Appliances are offered as a scalable VMware virtual appliance and UTM's are certified for use on VMware and Citrix, and also run on Hyper-V and KVM.
The Sophos UTM is also offered as a software appliance available as an image you can stall on your Intel-based server hardware of choice.
- Cloud-based appliances
Using Amazon Virtual Private Cloud (VPC), you can run your UTM in the cloud. Or, you can use the Amazon VPC connector on the UTM at your office for secure and robust access to your Amazon-hosted resources.
Add Sophos Web in Endpoint Protection
Sophos offers a unique way to extend your secure web gateway protection to your offsite users by integrating web protection into our Endpoint agent for Windows. Available with both our Sophos Web Appliance and UTM Secure Web Gateway solutions, Sophos Endpoints have full web security and control built-in to provide complete protection on the go. They connect through the cloud to your Sophos UTM or Sophos Web Appliance, obtaining the latest web surfing policies while providing up-to-the-minute activity reporting.
To include web protected endpoints with your dedicated Sophos Web Appliance simply choose the Sophos Enduser Web Suite or Sophos Complete Security Suite.
To add web protected endpoints to your UTM Secure Web Gateway, simply add the optional UTM-Endpoint Protection module when purchasing your UTM.
Download the Sophos Web Appliances Data Sheet (PDF).
- Pricing and product availability subject to change without notice.
*Web Protection - Advanced License is required and purchased seperately.
Our Price: $2,495.00
*Web Protection - Advanced License is required and purchased seperately.
Our Price: $2,995.00
Our Price: $4,995.00
Our Price: $10,995.00