Sophos XG Firewall

Sophos XG FirewallThe world’s best visibility, protection, and response.Sophos XG Firewall brings a fresh new approach to the way youmanage your firewall, respond to threats, and monitor what’shappening on your network.

Sophos XG FirewallSophos XG FirewallSophos XG Firewall introduces an innovative approach to the way that youmanage your firewall, and how you can detect and respond to threats on yournetwork.See it. Stop it. Secure it.Our comprehensive next-generation firewall protection has been built to expose hidden risks, block both known andunknown threats, and automatically respond to incidents.Exposes hidden risksBlocks unknown threatsAutomatically responds to incidentsSophos XG Firewall provides unrivaledvisibility into risky users, unknown andunwanted apps, advanced threats,suspicious payloads, encryptedtraffic and much more. Rich on-boxreporting is built-in and powerfulcentralized reporting for multiplefirewalls is available in the cloud.Sophos XG Firewall provides all thelatest advanced technology you need toprotect your network from ransomwareand advanced threats including toprated IPS, Advanced Threat Protection,Cloud Sandboxing and full AI-poweredthreat analysis, Dual AV, Web and AppControl, Email Protection and a fullfeatured Web Application Firewall.And it’s easy to setup and manage.XG Firewall is the only network securitysolution that is able to fully identify thesource of an infection on your networkand automatically limit access toother network resources in response.This is made possible with our uniqueSophos Security Heartbeat that sharestelemetry and health status betweenSophos endpoints and your firewall.1

Sophos XG FirewallThe Xstream AdvantageThe XG Firewall Xstream architecture is engineered to deliver extreme levelsof visibility, protection, and performance to help address some of the greatestchallenges facing network administrators today.Xstream SSL InspectionXstream Network Flow FastPathAccording to the latest statistics, approximately 80% of webtraffic is encrypted, making it invisible to most firewalls. Anincreasing amount of malware and potentially unwantedapps exploit the fact that organizations are simply not usingSSL inspection. Network administrators' main fears are thatSSL inspection will have a performance impact or causesomething to break, impacting the user experience.Traffic which is known to be secure can be offloaded to theXstream Network Flow FastPath. This accelerated pathfor trusted traffic boosts performance dramatically byfreeing up resources from unnecessary traffic inspectiontasks. This is particularly important for voice and videoapplications which are very sensitive to latency and so canquickly lead to a degradation of the user experience. XGFirewall includes automatic and policy-based intelligentoffloading for trusted traffic processing at wire speed.XG Firewall removes the blind spots caused by encryptedtraffic by allowing you to use SSL inspection whilstmaintaining performance efficiency.Xstream DPI EngineWe believe you should never have to decide betweensecurity and performance. XG Firewall includes a highspeed Deep Packet Inspection (DPI) engine to scan yourtraffic for threats without a proxy slowing down the process.The firewall stack can completely offload the processingto the DPI engine, significantly reducing latency and soimproving overall efficiency.XG Firewall provides robust deep packet threat protection ina single streaming engine for AV, IPS, Web, App Control andSSL inspection.2

Sophos XG FirewallSophos CentralSophos Central is at the heart of everything we do. Our cloud managementplatform provides a single pane of glass to not only manage your firewalls, butalso your full portfolio of Sophos security solutions.Central ManagementCentral ReportingSimply manage multiple firewallsFirewall Reporting in the cloudSophos Central is the ultimate cloud-managementplatform - for all your Sophos products. It makes day-to-daysetup, monitoring, and management of your XG Firewalleasy. It also provides helpful features such as alerting,backup management, one-click firmware updates and rapidprovisioning of new firewalls.Sophos Central includes powerful reporting tools thatenable you to visualize your network, web, applicationactivity, and security over time. You get a flexible reportingexperience that combines a variety of built-in reportswith powerful tools to create your own custom reports –enabling you to report what you want, how you want.Ì Manage all your XG Firewalls and otherSophos products from a single consoleÌ Increase your visibility into networkactivity through analyticsÌ Configure changes and apply them to a group offirewalls or manage each firewall individuallyÌ Analyze data to identify security gaps, suspicious userbehavior or other events requiring policy changesÌ Create a backup schedule and storeup to 5 backups in the cloudÌ Use the pre-defined modules or customizeeach report for specific use casesNote: Central Management is available at no extra cost.Note: Central Reporting is available at no extra cost for the storage of up to 7 daysof report data. Premium options with longer data retention are available for optionalpurchase.Zero-touch DeploymentUsing Sophos Central, you can create a configuration for an XG firewall which you can then deploy at yourconvenience, for example, at a remote site. There is no need for technical staff on-site, simply providethe configuration file, store it on a USB key and boot the appliance with the USB key connected.Learn more about the Sophos Central Ecosystem at sophos.com/firewall-central.3

Sophos XG FirewallSynchronized SecuritySecurity Heartbeat - Your firewall and yourendpoints are finally talkingSophos XG Firewall is the only network security solutionthat is able to fully identify the user and source of aninfection on your network and automatically limit access toother network resources in response. This is made possiblewith our unique Sophos Security Heartbeat that sharestelemetry and health status between Sophos endpointsand your firewall and integrates endpoint health into firewallrules to control access and isolate compromised systems.Synchronized Application ControlUsing Security Heartbeat, we can do much more thanjust see the health status of an endpoint. We also havea solution to one of the biggest problems most networkadministrators face today - lack of visibility into networktraffic.Synchronized Application Control automatically identifies,classifies and controls encrypted, custom, evasive, andgeneric HTTP or HTTPS applications which are currentlygoing unidentified.The good news is, this all happens automatically, andis successfully helping numerous businesses andorganizations to save time and money in protecting theirenvironments today.What Next-Gen Firewalls See TodayYou can’t control what you can’t see. All firewalls todaydepend on static application signatures to identify appsBut those don’t work for most custom, obscure, evasive,or any apps using generic HTTP or HTTPS.What XG Firewall SeesXG Firewall utilizes Synchronized Security to automaticallyidentify, classify, and control all unknown applicationseasily blocking the apps you don’t want and prioritizingthe ones you do.Lateral Movement ProtectionSynchronized User IDLateral Movement Protection automatically isolatescompromised systems at every point in the network tostop attacks dead in their tracks. Healthy endpoints assistby ignoring all traffic from unhealthy endpoints, enablingcomplete isolation, even on the same network segment, toprevent threats and active adversaries from spreading orstealing data.User authentication is critically important in a nextgeneration firewall but often challenging to implementin a seamless and transparent way. Synchronized UserID eliminates the need for client or server authenticationagents by sharing user identity between the endpointand the firewall through Security Heartbeat. It’s justanother great benefit of having your firewall and endpointsintegrated and sharing information.Synchronized SD-WAN - Powerful, reliable application routingSynchronized SD-WAN harnesses the power of Synchronized Security to optimizeWAN path selection for your important business applications.With Synchronized Application Control, discovered applications, which would otherwise beunknown, can be used for traffic matching criteria in SD-WAN routing policies. This is yetanother way that Synchronized Security can improve the efficiency of your network.4

Sophos XG FirewallProtection ModulesYou can choose from a number of modules to customize the protection offeredby your firewall to your individual needs and deployment scenario.Network ProtectionWeb ProtectionAll the protection you need to stop sophisticated attacksand advanced threats while providing secure networkaccess to those you trust.Unmatched visibility and control over all your user’s weband application activity.Next-gen Intrusion Prevention SystemProvides advanced protection from all types of modernattacks. It goes beyond traditional server and networkresources to protect users and apps on the network as well.Provides enterprise-level Secure Web Gateway policycontrols to easily manage sophisticated user and groupweb controls. Apply policies based upon uploaded webkeywords indicating inappropriate use or behavior.Security HeartbeatApplication Control and QoSCreates a link between your Sophos Central protectedendpoints and your firewall to identify threats faster,simplify investigation and minimize impact from attacks.Easily incorporate Heartbeat status into firewall policies toautomatically isolate compromised systems.Enables user-aware visibility and control over thousandsof applications with granular policy and traffic-shaping(QoS) options based on application category, risk, andother characteristics. Synchronized Application Controlautomatically identifies all the unknown, evasive, andcustom applications on your network.Advanced Threat ProtectionInstant identification and immediate response to today’smost sophisticated attacks. Multi-layered protectionidentifies threats instantly and Security Heartbeat providesan emergency response.Advanced VPN technologiesAdds unique and simple VPN technologies including ourclientless HTML5 self-service portal that makes remoteaccess incredibly simple or utilize our exclusive light-weightsecure SD-RED (Remote Ethernet Device) VPN technology.Powerful user and group web policyAdvanced Web Threat ProtectionBacked by SophosLabs, our advanced engine providesthe ultimate protection from today’s polymorphic andobfuscated web threats. Innovative techniques likeJavaScript emulation, behavioral analysis, and originreputation help keep your network safe.High-performance traffic scanningOptimized for top performance, our Xstream SSL inspectionprovides ultra-low latency inspection and HTTPS scanningwhilst maintaining performance.See the Licensing section at the end of this document for details of all purchase options.5