Sophos XN553CTAA Handleiding

Sophos Softwarelicentie & -uitbreiding XN553CTAA

Bekijk gratis de handleiding van Sophos XN553CTAA (6 pagina’s), behorend tot de categorie Softwarelicentie & -uitbreiding. Deze gids werd als nuttig beoordeeld door 2 mensen en kreeg gemiddeld 4.5 sterren uit 1.5 reviews. Heb je een vraag over Sophos XN553CTAA of wil je andere gebruikers van dit product iets vragen? Stel een vraag

Download PDF

Pagina 1/6

XG Firewall Features

Sophos XG Firewall

Highlights

ÌPurpose-built user interface with

interactive control center

ÌOptimized three-clicks-to-anywhere navigation

ÌPolicy Control Center Widget monitors policy activity

for business, user and network policies and tracks

unused, disabled, changed and new policies

ÌNew uniﬁed policy model enabling all business, user

and network policies to be managed on a single

screen with powerful ﬁltering and search options

ÌPolicy Templates for common business applications like

Microsoft Exchange, SharePoint, Lync, and much more

deﬁned in XML enabling customization and sharing.

ÌStreamlined ﬁrewall rule management for

large rule sets with grouping with at-a-glance

rule feature and enforcement indicators

ÌCustom AV, Sandboxing, IPS, Web, App, Trafﬁc

Shapping (QoS), routing, and Heartbeat settings

per user or network policy on a single screen

ÌSophos Security Heartbeat connecting Sophos

endpoints with the Firewall to share health status

and telemetry to enable instant identiﬁcation

of unhealty or compromised endpoints

ÌFirewall rule support for Endpoint Health (Sophos

Security Heartbeat) to automatically isolate or limit

network access to compromised endpoints

ÌSynchronized App Control to automatically,

identify, classify and control all unknown

applications on the network

ÌPolicy test simulator tool to enable ﬁrewall rule and web

policy simulation and testing by user, IP and time of day

ÌUser Threat Quotient for identifying risky users based

on recent browsing behavior and ATP triggers

ÌApplication Risk Meter provides and overall risk factor

based on the risk level of applications on the network

ÌConﬁguration API for all features

for RMM/PSA integration

ÌDiscover Mode (TAP mode) for seamless integration for

trials and PoCs with support for Synchronized Security

ÌFull-featured centralized management with

Sophos Firewall Manager available as a

hardware, software, or virtual appliance

ÌEasy streamlined setup wizard to enable quick out-

of-the box deployment in just a few minutes

Base Firewall

General Management

ÌPurpose-built streamlined user interface and ﬁrewall

rule management for large rule sets with grouping with

at-a-glance rule feature and enforcement indicators

ÌTwo-clicks-to-anywhere navigation

ÌAdvanced trouble-shooting tools in

GUI (e.g., Packet Capture)

ÌHigh Availability (HA) support clustering two

devices in active-active or active-passive mode.

ÌFull command-line-interface (CLI) accessible from GUI

ÌRole-based administration

ÌAutomated ﬁrmware update notiﬁcation with easy

automated update process and roll-back features

ÌReusable system object deﬁnitions for

networks, services, hosts, time periods,

users and groups, clients and servers

ÌSelf-service user portal

ÌConﬁguration change tracking

ÌFlexible device access control for services by zones

ÌEmail or SNMP trap notiﬁcation options

ÌSNMP and Netﬂow support

ÌCentral managment support from Sophos Firewall

Manager or Sophos Cloud Firewall Manager

XG Firewall Features

ÌBackup and restore conﬁgurations: locally, via FTP

or email; on-demand, daily, weekly or monthly

ÌAPI for third party integration

ÌRemote access option for Sophos Support

ÌCloud-based license management via MySophos

Firewall, Networking, and Routing

ÌStateful deep packet inspection ﬁrewall

ÌFastPath Packet Optimization

ÌUser, group, time, or network based policies

ÌAccess time polices per user/group

ÌEnforce policy across zones, networks, or by service type

ÌZone isolation and zone-based policy support.

ÌDefault zones for LAN, WAN, DMZ, LOCAL, VPN, and WiFi

ÌCustom zones on LAN or DMZ

ÌCustomizable NAT policies with IP masquerading

and full object support to redirect or forward

multiple services in a single rule

ÌFlood protection: DoS, DDoS and portscan blocking

ÌCountry blocking by geo-IP

ÌRouting: static, multicast (PIM-SM)

and dynamic (RIP, BGP, OSPF)

ÌUpstream proxy support

Ì Protocol independent multicast

routing with IGMP snooping

ÌBridging with STP support and

ARP broadcast forwarding

ÌVLAN DHCP support and tagging

ÌMultiple bridge support

Ì WAN link balancing: multiple Internet connections,

auto-link health check, automatic failover, automatic

and weighted balancing, and granular multipath rules

ÌWireless WAN support (n/a in virtual deployments)

Ì 802.3ad interface link aggregation

Ì Full conﬁguration of DNS, DHCP and NTP

ÌDynamic DNS

Ì IPv6 Ready Logo Program Approval Certiﬁcation

ÌIPv6 tunnelling support including 6in4, 6to4, 4in6,

and IPv6 rapid deployment (6rd) through IPSec

Base Trafﬁc Shaping and Quotas

ÌFlexible network or user based trafﬁc shaping (QoS)

(enhanced Web and App trafﬁc shaping options are

included with the Web Protection Subscription)

ÌSet user-based trafﬁc quotas on upload/download

or total trafﬁc and cyclical or non-cyclical

ÌReal-time VoIP optimization

ÌDSCP marking

Secure Wireless

ÌSimple plug-and-play deployment of Sophos

wireless access points (APs) — automatically

appear on the ﬁrewall control center

ÌCentral monitor and manage all APs and wireless

clients through the built-in wireless controller

ÌBridge APs to LAN, VLAN, or a separate

zone with client isolation options

ÌMultiple SSID support per radio including hidden SSIDs

ÌSupport for the latest security and encryption

including WPA2 Personal and Enterprise

ÌSupport for IEEE 802.1X (RADIUS authentication)

ÌSupport for 802.11r (fast transition)

ÌHotspot support for (custom) vouchers,

password of the day, or T&C acceptance

ÌWireless guest Internet access with

walled garden options

ÌTime-based wireless network access

ÌWireless repeating and bridging meshed

network mode with supported APs

ÌAutomatic channel selection background optimization

ÌSupport for HTTPS login

ÌRogue AP detection

Authentication

ÌTransparent, proxy authentication (NTLM/

Kerberos) or client authentication

ÌAuthentication via: Active Directory,

eDirectory, RADIUS, LDAP and TACACS+

ÌServer authentication agents for Active

Directory SSO, STAS, SATC

ÌClient authentication agents for

Windows, Mac OS X, Linux 32/64

XG Firewall Features

ÌAuthentication certiﬁcates for iOS and Android

ÌSingle sign-on: Active directory, eDirectory

ÌAuthentication services for IPSec, L2TP, PPTP, SSL

ÌCaptive Portal

User Self-Serve Portal

ÌDownload the Sophos Authentication Client

ÌDownload SSL remote access client (Windows)

and conﬁguration ﬁles (other OS)

ÌHotspot access information

ÌChange user name and password

ÌView personal internet usage

ÌAccess quarantined messages

(requires Email Protection)

Base VPN Options

ÌSite-to-site VPN: SSL, IPSec, 256- bit AES/3DES,

PFS, RSA, X.509 certiﬁcates, pre-shared key

ÌL2TP and PPTP

ÌRemote access: SSL, IPsec, iPhone/iPad/

Cisco/Andriod VPN client support

ÌIKEv2 Support

ÌSSL client for Windows and conﬁguration

download via user portal

IPSec Client (sold separately)

ÌAuthentication: Pre-Shared Key (PSK), PKI

(X.509), Smartcards, Token and XAUTH

ÌEncryption: AES (128/192/256), DES, 3DES

(112/168), Blowﬁsh, RSA (up to 2048 Bit), DH

groups 1/2/5/14, MD5 and SHA-256/384/512

ÌIntelligent split-tunneling for optimum trafﬁc routing

ÌNAT-traversal support

ÌClient-monitor for graphical overview

of connection status

ÌMultilingual: German, English, and French

Sandstom Protection Subscription

Sandstorm Cloud Sandbox Protection

ÌFull integration into your Sophos

security solution dashboard

ÌInspects executables and documents containing

executable content (including .exe, .com, and .dll, .doc,

.docx, docm and .rtf and PDF) and archives containing

any of the ﬁle types listed above (including ZIP, BZIP,

GZIP, RAR, TAR, LHA/LZH, 7Z, Microsoft Cabinet)

ÌMachine Learning technology with Deep

Learning scans all executable ﬁles

ÌIn-depth malicious ﬁle reports and

dashboard ﬁle release capability

ÌOptional data center selection and ﬂexible

user and group policy options on ﬁle type,

exclusions, and actions on analysis

ÌSupports one-time download links

Network Protection Subscription

Intrusion Prevention (IPS)

ÌHigh-performance, next-gen IPS deep packet

inspection engine with selective IPS patterns

for maximum performance and protection

ÌTop rated by NSS Labs

ÌThousands of signatures

ÌSupport for custom IPS signatures

ÌIPS Policy Smart Filters that enable dynamic policies

which automatically update as new patterns are added

ÌFlexible IPS policy deployment as part of any

network or user policy with full customization

ATP and Security Heartbeat™

ÌAdvanced Threat Protection (Detect and block network

trafﬁc attempting to contact command and control

servers using multi-layered DNS, AFC, and ﬁrewall)

ÌSophos Security Heartbeat™ instantly identiﬁes

compromised endpoints including the host, user,

process, incident count, and time of compromise

ÌSophos Security Heartbeat™ policies can limit

access to network resources or completely isolate

compromised systems until they are cleaned up

Remote Ethernet Device (RED) VPN

ÌCentral Management of all RED devices

ÌNo conﬁguration: Automatically connects

through a cloud-based provisioning service

ÌSecure encrypted tunnel using digital X.509

certiﬁcates and AES256-encryption

ÌVirtual Ethernet for reliable transfer of

all trafﬁc between locations

Product specificaties

Merk:	Sophos
Categorie:	Softwarelicentie & -uitbreiding
Model:	XN553CTAA
Compatibiliteit:	XG 550
Softwaretype:	Hernieuwing
Aantal licenties:	1 licentie(s)
Licentie termijn (maanden):	36 maand(en)