

The real-time antivirus protection is powered by AI machine learning with heuristic analysis to detect never seen before zero-day threats regardless of whether it's the free or the premium product.Īlthough the Free plan isn't as advanced as the Premium, however, they still provide a few extra features beyond simple protection, including parental control to blacklist unwanted sites from the reach of your children.Īdvanced Web protection and Anti-Phishing
SOPHOS REVIEWS WINDOWS
Sophos Antivirus for Windows products provides multiple security features that can be very useful for users concerned with the security of their devices. These include Antivirus for Windows, Antivirus for Mac, Hitman Pro, and Sophos Home Premium products. Sophos does provide copious online documentation and videos but it’s a lot to wade through and it still refers to the XG firewalls.Sophos has multiple products for users to enjoy based on their needs. The XGS 3300 is easy to deploy, although the sheer range of security features may present new users with a steep learning curve for ongoing configuration. The reports option in the web console’s side menu loads a variety of dashboards and graphs showing detected threats, malware and web content filtering activities, offers reports for key compliance standards, and all their content can be exported in PDF, HTML and CSV formats.

Reporting is a standard feature on all XGS models with the web console providing a wealth of information on all things security related. If you want Facebook gone from the workplace, you’ll be pleased to know Sophos provides 73 app categories covering every possible social activity. There are plenty more security features to play with web filtering offers 86 URL categories to block or allow while application controls currently provide 3,532 predefined apps. Policies contain firewall rules for sources and destinations, service filters, blocking actions and time schedules and you can apply custom policies for web filtering, IPS and application controls. The XGS 3300 is highly versatile, and you can place its ports in different zones and apply custom security policies to each one. Sophos XGS 3300 review: Security and reporting Cloud apps get the same tough love: the dashboard insights section lists all those detected and you can classify each one as sanctioned or unsanctioned and apply a traffic shaping policy to control their use. The SAC (synchronized application control) feature also works with this service, as it detects unknown applications and pushes out firewall policies to control them. This uses a heartbeat service to monitor endpoints running the Intercept X agent and if any are compromised, a firewall policy with a minimum heartbeat setting isolates all systems in the same zone. Sophos Central has another trick up its sleeve, and its endpoint agents can be brought under the firewall’s control with the Synchronized Security feature. It’s dead easy, too after registering the XGS 3300 with our cloud account, we were able to view live reports from the portal and configure it using exactly the same console as the local one. If you have a Sophos Central account, you can manage the firewall remotely as well.


Clicking on these shows downloaded files that have been sent to the Sophos cloud sandbox for detonation and analysis to see whether they are safe to release. The User and device Insights section is particularly useful as it provides active icons for functions such as zero-day protection.
SOPHOS REVIEWS PLUS
The local web console opens with a very informative Control Center dashboard presenting a detailed overview of network activity, security issues, web traffic, detected network attacks plus blocked and allowed applications and web categories. Sophos XGS 3300 review: Management services Protection starts immediately, with a base set of firewall security policies created for you which enable web filtering and anti-malware. We chose routed mode, as we wanted the appliance to provide all security functions including firewalling. After insisting we secured administrative access, it helped set up LAN and WAN port address assignments plus DHCP services and provide an email address for alerting. This doesn’t include the email and web server protection modules though, which are available as optional extras.Ī dedicated management port is provided and we found initial deployment via the browser-based quick-start wizard swift. The Xstream bundle enables base firewall features including Xstream Network Flow FastPath along with TLS 1.3 and deep packet inspection, and adds the network, web and zero-day protection modules, central orchestration and enhanced 24/7 support. Licensing has changed quite a bit too and you can customize features by choosing which protection modules you want.
