More companies trust Sophos XG Firewall to protect their networks from cyber attacks and malicious intrusions.
Industry leader in Network Security
Sophos XG Firewall with Xstream processor protects your network from the latest threats while accelerating your important SaaS, SD-WAN, and cloud application traffic.
Xstream Flow Processors enhances application acceleration, high performance TLS inspection, and powerful threat protection.
How Sophos XG Firewall works
What makes Sophos XG Firewall different
You will never need another Firewall appliance except Sophos Firewall
Synchronized Security
Sophos Firewall is the only network security solution that is able to fully identify the user and source of an infection on your network, and automatically limit access to other
network resources in response.
This is made possible with our unique Sophos Security Heartbeat that shares telemetry and health status between Sophos endpoints and your firewall and integrates endpoint health into firewall rules to control access and isolate compromised systems.
The good news is, this all happens automatically, and is successfully helping numerous businesses and organizations to save time and money in protecting their environments today
Synchronized Application Control
Using Security Heartbeat, we can do much more than just see the health status of an endpoint. We also have a solution to one of the biggest problems most network
administrators face today - lack of visibility into network traffic.
Synchronized Application Control utilizes the Heartbeat connections with Sophos endpoints to automatically identify, classify, and control application traffic.
All encrypted, custom, evasive, and generic HTTP or HTTPS applications which are currently going unidentified will be revealed.
Lateral Movement Protection
Lateral Movement Protection automatically isolates compromised systems at every point in the network to stop attacks dead in their tracks.
Healthy endpoints assist
by ignoring all traffic from unhealthy endpoints, enabling complete isolation, even on the same network segment, to prevent threats and active adversaries from spreading or stealing data.
Synchronized User ID
User authentication is critically important in a NeXT generation firewall but often challenging to implement in a seamless and transparent way.
Synchronized User ID eliminates the need for client or server authentication agents by sharing user identity between the endpoint
and the firewall through Security Heartbeat.
It’s just another great benefit of having your firewall and endpoints integrated and sharing information.
Sophos Central
Sophos Central is a cloud management platform that provides a single central dashboard to manage your Sophos firewalls, and the full portfolio of Sophos security solutions.
Central Management is available at no extra cost.
Manage multiple firewalls
- Manage all your Sophos Firewalls and other Sophos products from a single console
- Configure changes and apply them to a group of firewalls or manage each firewall individually.
- Create a backup schedule and store
up to five backups in the cloud. - Schedule firmware updates across your
entire network with just a few clicks.
Firewall Reporting in the cloud
Sophos Central includes powerful reporting tools that enable you to visualize your network, web, application activity, and security over time.
You get a flexible reporting
experience that combines a variety of built-in reports with powerful tools to create your own custom reports, enabling you to report what you want how you want.
- Increase your visibility into network
activity through analytics - Analyze data to identify security gaps, suspicious user behavior or other events requiring policy changes
- Use the pre-defined modules or customize each report for specific use cases.
Central Reporting is available at no extra cost for the storage of up to 7 days of report data.
Premium options with longer data retention and additional features are available for optional purchase, either individually or as part of other subscriptions/bundles.
Zero-Touch Deployment
Using Sophos Central, you can create a configuration for a Sophos Firewall which you can then deploy at your convenience – for example, at a remote site. There is no need for technical staff on-site.
Simply provide the configuration file, store it on a USB key, and boot the appliance with the USB key connected.
What Sophos Firewall Sees
You can’t control what you can’t see. All firewalls today depend on static application signatures to identify apps. But those don’t work for most custom, obscure, evasive, or any apps using generic HTTP or HTTPS.
Sophos Firewall utilizes Synchronized Security to automatically identify, classify, and control all unknown applications easily blocking the apps you don’t want and prioritizing the ones you do.
Sophos Firewall Synchronized Security
Synchronized Security is the world’s first – and best – cybersecurity system. Endpoint, network, mobile, Wi-Fi, email, and encryption products, all sharing information in real time and responding automatically to incidents:
- Isolate infected endpoints, blocking lateral movement
- Restrict Wi-Fi for non-compliant mobile devices
- Scan endpoints on detection of compromised mailboxes
- Revoke encryption keys if a threat is detected
- Identify all apps on the network
And with everything controlled through the Sophos Central cloud-based security platform, management is a breeze.
How to Get Synchronized Security
To enable Synchronized Security, all you need is two or more Sophos products that work together. At least one product must be managed through the Sophos Central management platform. And if you’re already a Sophos customer, you’re already halfway there.