Description
Sophos XG 330 Zero-Day Protection - 1 Year uses next-gen, cloud-sandbox technology to give your organization an extfra layer of security against ransomware and targeted attacks.
The only network sandbox to use deep learning analysis for more effective detection, it integrates with Sophos XG Firewall, Sophos UTM, Sophos Email Appliance, and Sophos Web Appliance — no additional hardware required.
And it’s great value for money. You get all the benefits of enterprise-grade protection without the enterprise price tag.
Features
Advanced protection from targeted attacks
Keep ransomware and unknown data-stealing malware off your network. Powerful, cloudbased, next-generation sandbox technology and deep learning analysis means you quickly and accurately detect, block, and respond to APTs and zero-day threats.
We keep it simple
Sophos Zero-Day Protection is fully integrated into your Sophos security solution. Simply update your subscription, apply the Sandstorm policy and you’re protected instantly against targeted attacks. You'll be up and running in minutes.
Block evasive threats that others don’t see
Detect ransomware and unknown threats specifically designed to evade first-generation sandbox appliances. Our full-system emulation approach provides the deepest level of visibility into the behavior of unknown malware and the detection of malicious attacks that others simply miss.
Deep forensic reporting
Accelerate response to advanced threats with simple incident-centric breach analysis. We provide you with prioritized APT intelligence by correlating the evidence. This approach both reduces noise and saves you time.
Lightning performance
Your Sophos security solution accurately pre-filters traffic, so only suspicious files are submitted to Sandstorm, ensuring minimal latency and end user impact.
How It Works
1. The Sophos security solution scans files against all conventional security checks (e.g., anti-malware signatures, bad URLs, etc.). If the file is executable or has executable content and is not downloaded from a safe website, the file is treated as suspicious. The Sophos security solution sends the suspicious file hash to Sophos Zero-Day Protection to determine if it has been previously analyzed.
2. If the file hash has been previously analyzed, Sophos Zero-Day Protection passes the threat intelligence to the Sophos security solution. Here, the file is delivered to the user’s device or blocked, depending on the information provided by Sophos Zero-Day Protection.
3. If the hash has not been seen before, a copy of the suspicious file is sent to Sophos Zero-Day Protection. Here, the file is detonated and its behavior is monitored. Once fully analyzed, Sophos Zero-Day Protection passes the threat intelligence to the Sophos security solution. Again, the file is delivered to the user’s device or blocked, depending on the information provided by Sophos Zero-Day Protection.
4. The Sophos security solution uses the detailed intelligence supplied by Sophos Zero-Day Protection to create deep forensic reports on each threat incident
- Seamless integration with your Sophos security solution
- Up and running in minutes
- Protects against ransomware APTs, unknown malware, and targeted attacks
- Threat intelligence you can act on
- Deep learning analysis
- Granular, incident-centric reports