
Sophos NDR Tech Specs
Sophos NDR
virtual appliance*
Sophos NDR
hardware appliance
Sophos NDR
on third-party hardware**
BEHAVIORAL ANALYTICS ENGINES
| Encrypted Payload Analytics | |||
| Domain Generation Algorithm | |||
| Intrusion Detection System | |||
| Session Risk Analytics | |||
| Data Detection Engine |
SIGNATURE ENGINES
| IDS (detection rules) | (VMware and Hyper-V only) | Add-on |
|
| IPS (blocking rules) - active inline blocking |
| Add-on |
|
DEPLOYMENT MODES
| SPAN/TAP | |||
| Passive Inline |
| Add-on |
|
| Active Inline | Add-on |
|
INVESTIGATION AND VISIBILITY
| Sophos NDR Investigation Console | |||
| Network asset visibility | |||
| Managed, unmanaged, and agentless asset visibility | |||
| Sophos Fusion integration |
SUPPORT
| Enhanced |
| Add-on |
|
| Enhanced Plus |
| Add-on |
|
*Deployment guidance for virtual appliances can be found here: https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/ThreatAnalysisCenter/Integrations/Sophos/NDR/NDRVirtual/index.html
**Details on third-party hardware requirments can be found here: https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/ThreatAnalysisCenter/Integrations/Sophos/NDR/NDRHardware/index.html