New lateral movement protection exposes blind spots on network switches or LAN segments with innovative Sophos Synchronized Security technology
OXFORD, U.K. — novembre 28, 2018 —

by sharing intelligence between the firewall and endpoints and automatically isolating infected systems is critical for every organization today,” said Schiappa. “Unfortunately, many business environments could have blind spots on their network switches or LAN segments, and these can become secret launch pads for attacks. The new features in Sophos XG Firewall prevents threats from spreading, even where the firewall doesn’t have direct control over traffic.”

Lateral Movement Protection is enabled through synchronized security

The Sophos XG Firewall automatically interacts with Sophos’ endpoint products, including its new Intercept X Advanced with Endpoint Detection and Response (EDR), to deliver this new layer of protection. These essential security anchors connect via the Security Heartbeat in Sophos’ Synchronized Security technology. This creates an intelligent solution that can proactively predict and protect against threats, detect and prevent further infection by automatically isolating machines, and remediate the infection. Security Heartbeat technology enables the automatic isolation of high-risk endpoints from other endpoints on the same broadcast domain or network segment.

“Our ingenious and aggressive cybercriminal adversaries are vigilant in developing new threats, leveraging exploits or manually attacking organizations themselves; the breaching of a weak point in a network followed by lateral movement and credential elevation is an increasing common playbook of the day,” said Frank Dickson, research vice president, Security Products, IDC. “By connecting network and endpoint intelligence through Security Heartbeat, Sophos has implemented an innovative and significant feature to identify and mitigate lateral movement-centric cyberattacks within seconds, automating the prevention of a threat spreading by isolating the endpoint. Essentially, Intercept X is strengthened with Sophos XG Firewall network-based enforcement to create a more integrated and synergist approach to cyber defense for businesses, easing the administration burden for cyber security professionals."

“A few years ago, when everyone was talking about the need for best-in-breed point products to create a layered approach, Sophos was pioneering Synchronized Security and revolutionized the cybersecurity market with its Security Heartbeat solution. In today’s world of constant and changing cyberthreats, having endpoint and network products communicating with each other and sharing intelligence is more important than ever,” said Brandon Vancleeve, vice president, Pine Cove Consulting, a Sophos Partner in Bozeman, Montana. “The new lateral movement protection is a huge enhancement to what was already impressive in Sophos’ Synchronized Security. Now, the XG Firewalls and endpoint protection will be able to isolate machines within their own subnet. This is an important development that will only improve our customers’ security posture, allowing them instant visibility into threats beyond the network. Most of our customers have multiple LAN Segments, so the new detection adds to what we consider the best protection available on the market.”

Additional new and enhanced features in Sophos XG Firewall include:

  • Protection Enhancements
  • Deeper, broader IPS coverage with increased granularity in patterns
  • JavaScript cryptojacking protection
  • Sandstorm Sandboxing Enhancements
    • Intercept X integration to identify zero-day threats before they enter the network
    • Deep behavioural, network and memory analysis with machine learning, CryptoGuard, and exploit detection
  • Networking Enhancements
    • New Sophos Connect IPSec VPN client with support for Synchronized Security
  • Education Features
    • Chromebook client authentication support for user-based policy and reporting
    • User/group policy support for SafeSearch and YouTube restrictions

Availability

Sophos XG Firewall is available from registered Sophos partners worldwide. A free trial of XG Firewall is available today. The ability to manage XG Firewall from the cloud management platform Sophos Central will be available Dec. 8 through an Early Access Program. Additional information about the XG Firewall can be found on Sophos.com.

 

À propos de Sophos

Sophos est un leader mondial de la cybersécurité qui protège 600000organisations à travers le monde grâce à une plateforme optimisée par l’IA et à des services fournis par des experts. Sophos accompagne les entreprises, quel que soit leur niveau de maturité en matière de cybersécurité, et évolue avec elles pour déjouer les cyberattaques. Ses solutions offrent une combinaison optimale entre apprentissage automatique, automatisation et renseignements sur les menaces en temps réel, à laquelle s’ajoute l’expertise humaine de l’équipe Sophos X-Ops, qui travaille en première ligne pour assurer la surveillance, la détection et la réponse aux menaces 24h/24 et 7j/7.
Sophos propose des services managés de détection et de réponse (MDR) de pointe, ainsi qu’un portefeuille complet de technologies de cybersécurité, parmi lesquelles des solutions de sécurité Endpoint, réseau, email et cloud, ainsi que des solutions de détection et de réponse étendues (XDR), de détection et de réponse aux menaces liées à l’identité (ITDR) et de SIEM de nouvelle génération. Associées à des services de conseil spécialisés, ces capacités aident les entreprises à réduire leurs risques de manière proactive et à répondre plus rapidement, tout en bénéficiant de la visibilité et de l’évolutivité nécessaires pour garder une longueur d’avance sur les menaces en constante évolution.
Sophos commercialise ses produits via un écosystème mondial de partenaires, comprenant des fournisseurs de services managés (MSP), des fournisseurs de services de sécurité managés (MSSP), des revendeurs et distributeurs, une marketplace d’intégrations et des partenaires spécialisés dans les cyber risques. Cette stratégie offre aux entreprises la flexibilité nécessaire pour choisir des partenaires de confiance pour protéger leurs opérations.  Le siège de l’entreprise est basé à Oxford, au Royaume-Uni. Plus d’informations sont disponibles sur www.sophos.fr.