Sophos Endpoint License Guide 5m252v
This document was ed by and they confirmed that they have the permission to share it. If you are author or own the copyright of this book, please report to us by using this report form. Report 3i3n4
Overview 26281t
& View Sophos Endpoint License Guide as PDF for free.
More details 6y5l6z
- Words: 927
- Pages: 4
Intercept X & Central Endpoint Protection Overview Managed by Sophos Central
BEFORE IT RUNS ON DEVICE
PREVENT
ATTACK SURFACE REDUCTION
SKU
CENTRAL ENDPOINT PROTECTION
STOP RUNNING THREAT DETECT INVESTIGATE REMEDIATE
DETECT AND INVESTIGATE
INTERCEPT X ADVANCED
INTERCEPT X ADVANCED WITH EDR
Web Security
Reputation
Web Control / Category-based URL Blocking
Peripheral Control (e.g. USB)
Application Control
Deep Learning Malware Detection Anti-Malware File Scanning
Live Protection
Pre-execution Behavior Analysis (HIPS)
Potentially Unwanted Application (PUA) Blocking
Data Loss Prevention
Exploit Prevention
RESPOND
INTERCEPT X
Runtime Behavior Analysis (HIPS)
Malicious Traffic Detection (MTD)
Active Adversary Mitigations
Ransomware File Protection (CryptoGuard)
Disk and Boot Record Protection (WipeGuard)
Man-in-the-Browser Protection (Safe Browsing)
Enhanced Application Lockdown
Cross Estate Threat Searching
Suspicious Events Detection and Prioritization (coming in 2019)
Threat Cases (Root Cause Analysis)
Deep Learning Malware Analysis
Advanced On-demand SophosLabs Threat Intelligence
Forensic Data Export
Automated Malware Removal
Synchronized Security Heartbeat
Sophos Clean On-demand Endpoint Isolation
Single-click “Clean and Block”
Sophos Intercept X Features
Details of features included in Intercept X. Intercept X Advanced also includes features from Sophos Central Endpoint Protection.
ACTIVE ADVERSARY MITIGATIONS
Enforce Data Execution Prevention
Mandatory Address Space Layout Randomization
Bottom-up ASLR
Null Page (Null Deference Protection)
Heap Spray Allocation
Dynamic Heap Spray
Stack Pivot
Stack Exec (MemProt)
Stack-based ROP Mitigations (Caller)
ANTIRANSOMWARE
Features
Automatic file recovery (CryptoGuard)
Disk and Boot Record Protection (WipeGuard)
Web Browsers (including HTA)
Web Browser Plugins
Java
Media Applications
Office Applications
Branch-based ROP Mitigations (Hardware Assisted)
Deep Learning Malware Detection
Structured Exception Handler Overwrite (SEHOP)
Import Address Table Filtering (IAF)
Deep Learning Potentially Unwanted Applications (PUA) Blocking
Load Library
False Positive Suppression
Reflective DLL Injection
Threat Cases (Root Cause Analysis)
Shellcode
VBScript God Mode
Sophos Clean
Wow64
Synchronized Security Heartbeat
Syscall
Can run as standalone agent
Hollow Process
Can run alongside existing antivirus
DLL Hijacking
Can run as component of existing Sophos Endpoint agent
Squiblydoo Applocker By
Windows 7
APC Protection (Double Pulsar / AtomBombing)
Windows 8
Process Privilege Escalation
Windows 8.1
Credential Theft Protection
Code Cave Mitigation
Windows 10
macOS*
Man-in-the-Browser Protection (Safe Browsing)
Malicious Traffic Detection
Meterpreter Shell Detection
REMOVE
RESPOND
INVESTIGATE
DEEP LEARNING PROTECTION
APPLICATION LOCKDOWN
Ransomware File Protection (CryptoGuard)
DEPLOYMENT
EXPLOIT PREVENTION
Features
* features ed CryptoGuard, Malicious Traffic Detection, Synchronized Security Heartbeat, Root Cause Analysis
Sophos Central Endpoint Protection Features
REMEDIATE
STOP RUNNING THREAT
PRE-EXECUTION PREVENT
ATTACK SURFACE REDUCTION
OPERATING SYSTEMS
Windows
macOS
Web Security
Reputation
Web Control / URL Category Blocking
Peripheral Control (e.g. USB)
Application Control
Anti-Malware File Scanning
Live Protection
Pre-execution Behavior Analysis (HIPS)
Potentially Unwanted Application (PUA) Blocking
Data Loss Prevention
Runtime Behavior Analysis (HIPS)
Malicious Traffic Detection (MTD)
Automated Malware Removal
Synchronized Security Heartbeat
Server Operating Systems are not covered by Central Endpoint or Central Intercept X. Central Intercept X Advanced also includes all Intercept X features.
© Copyright 2018. Sophos Ltd. All rights reserved. ed in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK Sophos is the ed trademark of Sophos Ltd. All other product and company names mentioned are trademarks or ed trademarks of their respective owners.
Endpoint Protection Managed by Enterprise Console ENDPOINT PROTECTION ENDPOINT PROTECTION STANDARD
ENDPOINT PROTECTION ADVANCED
ENDPOINT EXPLOIT PREVENTION
EPS
EPA
EXP
Per
Per
Per add-on to EPS/EPA
Web Security
Reputation
Windows
Windows Server*
macOS
Web Control / Category-based URL Blocking
Peripheral Control (e.g. USB)
Application Control
Client Firewall
Anti-Malware File Scanning
Live Protection
Pre-execution Behavior Analysis (HIPS)
Potentially Unwanted Application (PUA) Blocking
Patch Assessment
Data Loss Prevention
SKU
STOP RUNNING THREAT
BEFORE IT RUNS ON DEVICE
Exploit Prevention Runtime Behavior Analysis (HIPS)
INVESTIGATE AND REMOVE
DETECT
PREVENT
ATTACK SURFACE REDUCTION
Pricing
RESPOND
OPERATING SYSTEMS
Automated Malware Removal
Malicious Traffic Detection (MTD)
Man-in-the-Browser Protection (Safe Browsing)
Ransomware File Protection (CryptoGuard)
Linux*
Synchronized Security Heartbeat Sophos Clean
* Recommend server-specific SVRWLV and SAVSVR licenses that include the full agent offering and Sophos for Virtual Environments (centralized scanning, light agent) offering for Windows servers.
© Copyright 2018. Sophos Ltd. All rights reserved. ed in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK Sophos is the ed trademark of Sophos Ltd. All other product and company names mentioned are trademarks or ed trademarks of their respective owners.
BEFORE IT RUNS ON DEVICE
PREVENT
ATTACK SURFACE REDUCTION
SKU
CENTRAL ENDPOINT PROTECTION
STOP RUNNING THREAT DETECT INVESTIGATE REMEDIATE
DETECT AND INVESTIGATE
INTERCEPT X ADVANCED
INTERCEPT X ADVANCED WITH EDR
Web Security
Reputation
Web Control / Category-based URL Blocking
Peripheral Control (e.g. USB)
Application Control
Deep Learning Malware Detection Anti-Malware File Scanning
Live Protection
Pre-execution Behavior Analysis (HIPS)
Potentially Unwanted Application (PUA) Blocking
Data Loss Prevention
Exploit Prevention
RESPOND
INTERCEPT X
Runtime Behavior Analysis (HIPS)
Malicious Traffic Detection (MTD)
Active Adversary Mitigations
Ransomware File Protection (CryptoGuard)
Disk and Boot Record Protection (WipeGuard)
Man-in-the-Browser Protection (Safe Browsing)
Enhanced Application Lockdown
Cross Estate Threat Searching
Suspicious Events Detection and Prioritization (coming in 2019)
Threat Cases (Root Cause Analysis)
Deep Learning Malware Analysis
Advanced On-demand SophosLabs Threat Intelligence
Forensic Data Export
Automated Malware Removal
Synchronized Security Heartbeat
Sophos Clean On-demand Endpoint Isolation
Single-click “Clean and Block”
Sophos Intercept X Features
Details of features included in Intercept X. Intercept X Advanced also includes features from Sophos Central Endpoint Protection.
ACTIVE ADVERSARY MITIGATIONS
Enforce Data Execution Prevention
Mandatory Address Space Layout Randomization
Bottom-up ASLR
Null Page (Null Deference Protection)
Heap Spray Allocation
Dynamic Heap Spray
Stack Pivot
Stack Exec (MemProt)
Stack-based ROP Mitigations (Caller)
ANTIRANSOMWARE
Features
Automatic file recovery (CryptoGuard)
Disk and Boot Record Protection (WipeGuard)
Web Browsers (including HTA)
Web Browser Plugins
Java
Media Applications
Office Applications
Branch-based ROP Mitigations (Hardware Assisted)
Deep Learning Malware Detection
Structured Exception Handler Overwrite (SEHOP)
Import Address Table Filtering (IAF)
Deep Learning Potentially Unwanted Applications (PUA) Blocking
Load Library
False Positive Suppression
Reflective DLL Injection
Threat Cases (Root Cause Analysis)
Shellcode
VBScript God Mode
Sophos Clean
Wow64
Synchronized Security Heartbeat
Syscall
Can run as standalone agent
Hollow Process
Can run alongside existing antivirus
DLL Hijacking
Can run as component of existing Sophos Endpoint agent
Squiblydoo Applocker By
Windows 7
APC Protection (Double Pulsar / AtomBombing)
Windows 8
Process Privilege Escalation
Windows 8.1
Credential Theft Protection
Code Cave Mitigation
Windows 10
macOS*
Man-in-the-Browser Protection (Safe Browsing)
Malicious Traffic Detection
Meterpreter Shell Detection
REMOVE
RESPOND
INVESTIGATE
DEEP LEARNING PROTECTION
APPLICATION LOCKDOWN
Ransomware File Protection (CryptoGuard)
DEPLOYMENT
EXPLOIT PREVENTION
Features
* features ed CryptoGuard, Malicious Traffic Detection, Synchronized Security Heartbeat, Root Cause Analysis
Sophos Central Endpoint Protection Features
REMEDIATE
STOP RUNNING THREAT
PRE-EXECUTION PREVENT
ATTACK SURFACE REDUCTION
OPERATING SYSTEMS
Windows
macOS
Web Security
Reputation
Web Control / URL Category Blocking
Peripheral Control (e.g. USB)
Application Control
Anti-Malware File Scanning
Live Protection
Pre-execution Behavior Analysis (HIPS)
Potentially Unwanted Application (PUA) Blocking
Data Loss Prevention
Runtime Behavior Analysis (HIPS)
Malicious Traffic Detection (MTD)
Automated Malware Removal
Synchronized Security Heartbeat
Server Operating Systems are not covered by Central Endpoint or Central Intercept X. Central Intercept X Advanced also includes all Intercept X features.
© Copyright 2018. Sophos Ltd. All rights reserved. ed in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK Sophos is the ed trademark of Sophos Ltd. All other product and company names mentioned are trademarks or ed trademarks of their respective owners.
Endpoint Protection Managed by Enterprise Console ENDPOINT PROTECTION ENDPOINT PROTECTION STANDARD
ENDPOINT PROTECTION ADVANCED
ENDPOINT EXPLOIT PREVENTION
EPS
EPA
EXP
Per
Per
Per add-on to EPS/EPA
Web Security
Reputation
Windows
Windows Server*
macOS
Web Control / Category-based URL Blocking
Peripheral Control (e.g. USB)
Application Control
Client Firewall
Anti-Malware File Scanning
Live Protection
Pre-execution Behavior Analysis (HIPS)
Potentially Unwanted Application (PUA) Blocking
Patch Assessment
Data Loss Prevention
SKU
STOP RUNNING THREAT
BEFORE IT RUNS ON DEVICE
Exploit Prevention Runtime Behavior Analysis (HIPS)
INVESTIGATE AND REMOVE
DETECT
PREVENT
ATTACK SURFACE REDUCTION
Pricing
RESPOND
OPERATING SYSTEMS
Automated Malware Removal
Malicious Traffic Detection (MTD)
Man-in-the-Browser Protection (Safe Browsing)
Ransomware File Protection (CryptoGuard)
Linux*
Synchronized Security Heartbeat Sophos Clean
* Recommend server-specific SVRWLV and SAVSVR licenses that include the full agent offering and Sophos for Virtual Environments (centralized scanning, light agent) offering for Windows servers.
© Copyright 2018. Sophos Ltd. All rights reserved. ed in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK Sophos is the ed trademark of Sophos Ltd. All other product and company names mentioned are trademarks or ed trademarks of their respective owners.
Related Documents 3h463d
Sophos Endpoint License Guide 5m252v
July 2022 0
Sophos 3l6c55
February 2022 0
Sophos Sg Series Sizing Guide 6z20d
November 2019 71
Sophos Xg Series Sizing Guide 356y4q
February 2021 0
Sophos Myutm Guide Na 1mn3k
November 2019 39
Sophos Endpoint Defense_how To Recover A Tamper Protected System i676w
December 2019 47More Documents from "Peter Belandres" 1084w
Sophos Endpoint License Guide 5m252v
July 2022 0
Ateneo Memory Aid - Labor Law And Social Legislation 736i2j
June 2020 8
Pengertian Kendaraan Bermotor 694u5v
October 2019 209
Forging Techniques In Ancient Cultures 4e164h
April 2020 31
Exapil 3p2u2o
August 2020 0