Sophos first to bring synchronized security to endpoints and networks

SOPHOS, a global leader in network and endpoint security, has introduced the first synchronized security protection against today’s sophisticated threats with the Sophos Security Heartbeat capability of the Sophos XG series of next-generation firewalls and UTMs.

This new technology directly links nextgeneration firewalls and UTMs with nextgeneration endpoint security to share threat intelligence that enables faster detection of threats, automatic isolation of infected devices, and more immediate and targeted response and resolution. With Security Heartbeat, organizations of any size can advance their defenses against increasingly coordinated and stealthy attacks and drive a dramatic reduction in the time and resources required to investigate and address security incidents.

The Security Heartbeat pulses continuous, real-time information about suspicious behavior or malicious activity between endpoints and the network firewall or UTM. By giving these traditionally independent products the ability to directly share intelligence, the Security Heartbeat can instantly trigger a response to stop or help control a malware outbreak or data breach. The Sophos XG Firewall uses data provided by Sophos endpoint protection to isolate and restrict access to and from the affected device, and in parallel, the endpoint protection can remediate the attack.

“Synchronized security from Sophos is a key innovation in next-generation security protection, and we are delivering that through Sophos Security Heartbeat,” said Stuart Fisher, managing director for Asia Pacific, Sophos. “For years, endpoint security and network security operated in isolated silos and failed to deliver the same level of coordinated security defense needed against fast-moving, coordinated threats. Today, realtime information can be shared between endpoints and the network to provide an automated and immediate response to suspicious behavior without any manual intervention. Synchronized security delivers better protection and manageability for organizations of any size, and this is particularly important to small and mid-sized businesses.”

How does the Security Heartbeat work? When a new Sophos-protected endpoint is added to the network, its Security Heartbeat automatically connects to the local Sophos XG Firewall and the endpoint immediately starts sharing health status. If suspicious traffic is identified by the firewall, or malware is detected on the endpoint, security and threat information is instantly shared securely via the Security Heartbeat. The endpoint reports context-rich information such as the computer name, username and process information associated with the threat. The firewall can automatically take action to isolate the endpoint from any routed or remote networks and trigger additional action on the endpoint to mitigate risk and prevent data loss. After the threat has been removed, the endpoint uses the Security Heartbeat to communicate updated health status back to the network, which then re-establishes normal service to the endpoint.

Built on the foundation of Sophos’ marketleading UTM and next generation firewalls, the Sophos XG Firewall includes proven technology from Sophos and Cyberoam, and delivers the following new features: Network Security Control Center, an innovative interface that delivers instant network and threat intelligence so users can take action fast. Unified Policy Model, a simplified policy management with pre-configured templates for business apps to dramatically streamline configuration. User and App Risk Analysis, an App Risk Score features help identify highrisk users and applications and highlight potential security hotspots. The User Threat Quotient manages user-centric policies based on an individual’s known behavior as well as the health status of the computer or mobile device they are using. Sophos Firewall Manager, a full-featured centralized management of multiple firewalls that’s free for Sophos partners and managed service providers. Centralized cloud management wherein Sophos partners and MSPs can manage multiple Sophos XG Firewall installations from the cloud, using the new Sophos Cloud Firewall Manager. Security Heartbeat, an industry first, meaningfully links the firewall and endpoint together, enabling them to share intelligence and enhance protection against advanced threats. A comprehensive range of appliances with options for every customer, which includes the new entry-level XG 85(w) and high-end XG750 models. The Sophos XG Firewall operating system will also run on existing Sophos SG appliances and Cyberoam NG appliances. Deployment flexibility where customers can choose to deploy as hardware, software or virtual appliances, and every feature is available on every form factor.

Available models range from a desktop appliance with integrated Wi-Fi to rack-mount appliances for the data center.