Sophos Central Endpoint Protection (previously Central Endpoint Advanced)
The unified console for managing your Sophos products
Sorry, this product is no longer available, Please contact us for a replacement.
Overview:
Sophisticated yet simple security for your desktop environment.
Sophos Endpoint Protection makes it simple to secure your Windows, Mac and Linux systems against malware and other endpoint threats. Sophos endpoint protection integrates proven technology like malicious traffic detection with real-time threat intelligence from SophosLabs to help you prevent, detect and remediate threats with ease. Web, application, and peripheral access policies can follow your users anywhere they go. And, your firewall and endpoints can share a security heartbeat.
Highlights
- Proven protection including anti-malware, HIPS and malicious traffic detection
- Web, application, device and data control for comprehensive policy enforcement
- Web filtering enforced on the endpoint whether users are on or off the corporate network
- Forensic-level system cleanup
- Choose cloud-based Sophos Central or install Sophos Enterprise Console to manage your deployment
- Automatically respond to incidents by synchronizing security between your endpoints and your firewall
Innovative protection
Sophos Endpoint Protection goes far beyond signature-based prevention of known malware. It correlates suspicious behaviors and activities using real-time threat intelligence from SophosLabs. From malicious URLs to web exploit code, unexpected system changes to command-and-control traffic, we'll connect the dots so your endpoints and data are protected. The result is fewer infected computers and better protection against attacks and data breaches.
Complete control
Enforce your web, application, device and data policies with ease, thanks to seamless integration within the endpoint agent and the management console.
- Web Control Category-based web filtering enforced on and off the corporate network
- Application Control Point-and-click blocking of applications by category or name
- Peripheral Control Managed access to removable media and mobile devices
- Data Loss Prevention (DLP) Restrict unauthorised data flow using prebuilt or custom rules
Lightning performance
Sophos Endpoint Protection is continually tuned for the best performance. The lightweight agent keeps users secure without slowing them down. Protection updates are small - typically under 30 KB - so updates are easy on your network and your endpoints.
"We have found the Sophos endpoint solutions to be easy, smooth and consistent. Having Sophos deployed has increased our security posture ten-fold."
Christopher Prewitt, Manager IT Security and Disaster Recovery, The Lincoln Electric Co.
Sophisticated simplicity
Sophos Endpoint Protection delivers sophisticated functionality coupled with a simple, intuitive user experience. Quick and easy deployment, well-balanced default policies and automatic configuration of HIPS are just a few examples of how we do things differently.
Flexible licensing and deployment
Choose Sophos Central cloud-based management or deploy Sophos Enterprise Console software to apply policy, updates, and gather reporting. Upgrade to Sophos Intercept X Advanced to combine foundation endpoint security with modern techniques.
Features:
Details of features included in Intercept X. Intercept X Advanced also includes features from Sophos Central Endpoint Protection.
OPERATING SYSTEMS | ||
---|---|---|
Windows | macOS | |
ATTACK SURFACE REDUCTION | ||
Web Security | ||
Download Reputation | ||
Web Control / URL Category Blocking | ||
Peripheral Control (e.g. USB) | ||
Application Control | ||
PRE-EXECUTION PREVENT | ||
Anti-Malware File Scanning | ||
Live Protection | ||
Pre-execution Behavior Analysis (HIPS) | ||
Potentially Unwanted Application (PUA) Blocking | ||
Data Loss Prevention | ||
STOP RUNNING THREAT | ||
Runtime Behavior Analysis (HIPS) | ||
Malicious Traffic Detection (MTD) | ||
REMEDIATE | ||
Automated Malware Removal | ||
Synchronized Security Heartbeat |
Server Operating Systems are not covered by Central Endpoint or Central Intercept X. Central Intercept X Advanced also includes all Intercept X features.
How to Buy:
Choose Sophos Central cloud-based management or deploy Sophos Enterprise Console software to apply policy, run updates, and gather reporting.
Choose either Standard for entry-level protection or Advanced for additional protection with policy controls.
Optionally, you can add Intercept X if you manage your endpoints through Sophos Central, or you can add Endpoint Exploit Prevention if you're deploying Enterprise console. Both options add CryptoGuard anti-ransomware and exploit technique mitigations. Additionally, Intercept X includes Root Cause Analysis attack visualization.
ENDPOINT PROTECTION | INTERCEPT X | |||||
---|---|---|---|---|---|---|
SKU | ENDPOINT PROTECTION STANDARD |
ENDPOINT PROTECTION ADVANCED |
ENDPOINT EXPLOIT PREVENTION |
CENTRAL ENDPOINT PROTECTION |
CENTRAL INTERCEPT X |
CENTRAL INTERCEPT X ADVANCED |
PREVENT: ATTACK SURFACE REDUCTION | ||||||
Web Security | ✔ | ✔ | ✔ | ✔ | ||
Download Reputation | ✔ | ✔ | ✔ | ✔ | ||
Web Control / Category-based URL Blocking | ✔ | ✔ | ✔ | ✔ | ||
Peripheral Control (e.g. USB) | ✔ | ✔ | ✔ | ✔ | ||
Application Control | ✔ | ✔ | ✔ | ✔ | ||
Client Firewall | ✔ | ✔ | ||||
PREVENT: BEFORE IT RUNS ON DEVICE | ||||||
Deep Learning malware detection | ✔ | ✔ | ||||
Anti-Malware File Scanning | ✔ | ✔ | ✔ | ✔ | ||
Live Protection | ✔ | ✔ | ✔ | ✔ | ||
Pre-execution Behavior Analysis (HIPS) | ✔ | ✔ | ✔ | ✔ | ||
Potentially Unwanted Application (PUA) Blocking | ✔ | ✔ | ✔ | ✔ | ||
Patch Assessment | ✔ | |||||
Data Loss Prevention | ✔ | ✔ | ✔ | |||
Exploit Prevention | ✔ | ✔ | ✔ | |||
DETECT: STOP RUNNING THREAT | ||||||
Runtime Behavior Analysis (HIPS) | ✔ | ✔ | ✔ | ✔ | ||
Malicious Traffic Detection (MTD) | ✔ | ✔ | ✔ | ✔ | ||
Active Adversary Mitigations | ✔ | ✔ | ||||
Ransomware File Protection (CryptoGuard) | ✔ | ✔ | ✔ | |||
Disk and Boot Record Protection (WipeGuard) | ✔ | ✔ | ||||
Man-in-the-Browser Protection (Safe Browsing) | ✔ | ✔ | ✔ | |||
RESPOND: INVESTIGATE AND REMOVE | ||||||
Automated Malware Removal | ✔ | ✔ | ✔ | ✔ | ✔ | |
Synchronized Security Heartbeat | ✔ | ✔ | ✔ | |||
Root Cause Analysis | ✔ | ✔ | ||||
Sophos Clean | ✔ | ✔ | ✔ |
Intercept X Tech Specs:
CENTRAL ENDPOINT |
INTERCEPT X | INTERCEPT X ADVANCED |
INTERCEPT X ADVANCED WITH EDR |
|
---|---|---|---|---|
ATTACK SURFACE REDUCTION | ||||
Web Security | ||||
Download Reputation | ||||
Web Control / Category-based URL Blocking | ||||
Peripheral Control (e.g. USB) | ||||
Application Control | ||||
BEFORE IT RUNS ON DEVICE | ||||
Deep Learning Malware Detection | ||||
Anti-Malware File Scanning | ||||
Live Protection | ||||
Pre-execution Behavior Analysis (HIPS) | ||||
Potentially Unwanted Application (PUA) Blocking | ||||
STOP RUNNING THREAT | ||||
Data Loss Prevention | ||||
Exploit Prevention | ||||
Runtime Behavior Analysis (HIPS) | ||||
Malicious Traffic Detection (MTD) | ||||
Active Adversary Mitigations | ||||
Ransomware File Protection (CryptoGuard) | ||||
Disk and Boot Record Protection (WipeGuard) | ||||
Man-in-the-Browser Protection (Safe Browsing) | ||||
Enhanced Application Lockdown | ||||
DETECT | ||||
Cross Estate Threat Searching | ||||
Suspicious Events Detection and Prioritization (coming in 2019) | ||||
INVESTIGATE | ||||
Threat Cases (Root Cause Analysis) | ||||
EDR Deep Learning Malware Analysis | ||||
Advanced On-demand SophosLabs Threat Intelligence | ||||
Forensic Data Export | ||||
REMEDIATE | ||||
Automated Malware Removal | ||||
Synchronized Security Heartbeat | ||||
Sophos Clean | ||||
On-demand SophosLabs Threat Intelligence | ||||
Single-click "Clean and Block" |
*Not all features are supported on all operating systems
Documentation:
Download the Sophos Endpoint Protection Data Sheet (PDF).
Download the Intercept X & Central Endpoint Protection Overview (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing and product availability subject to change without notice.
- Full Endpoint Agent and Sophos for Virtual Environments light agent cannot be deployed on the same computer
Includes choice of:
- Endpoint Agent: (Windows/macOS) Anti-malware, Live Protection, Web Security, Web Control, Malware Removal, Peripheral Control, Application Control, Synchronized Security Heartbeat (Windows only) Behaviour Analysis/HIPS, Data Loss Prevention, Download Reputation, Malicious Traffic Detection
- Sophos for Virtual Environments, Light Agent off-board scanning: (Windows Desktop VMs) Anti-malware, Live Protection, Malware Removal
- Security Heartbeat functionality is available when Cloud Endpoint Advanced is used in conjunction with one of the following Sophos Firewall subscriptions - Network Protection, FullGuard or EnterpriseGuard.