Sophos Next Generation Firewall

J&M Eastern Group is a Sophos supplier in Malaysia that specialises in Sophos Solutions. As a Sophos partner and reseller in Malaysia, we carry a wide range of Sophos products to meet your requirements and quickly respond to the demands of your business. Our team is well experienced with Sophos products, solutions and services.

Powered by threat intelligence, AI and machine learning from SophosLabs and SophosAI, Sophos delivers a broad portfolio of advanced products and services to secure users, networks and endpoints against ransomware, malware, exploits, phishing and the wide range of other cyberattacks. Sophos provides a single integrated cloud-based management console, Sophos Central – the centerpiece of an adaptive cybersecurity ecosystem that features a centralized data lake that leverages a rich set of open APIs available to customers, partners, developers, and other cybersecurity vendors. Sophos sells its products and services through reseller partners and managed service providers (MSPs) worldwide.

Xstream Protection

Sophos Firewall’s Xstream architecture protects your network from the latest threats while accelerating your important SaaS, SD-WAN, and cloud application traffic.

TLS 1.3 Decryption
Remove an enormous blind spot with intelligent TLS inspection that’s fast and effective, supporting the latest standards with extensive exceptions and point-and-click policy tools to make your job easy.
Deep Packet Inspection
Stop the latest ransomware and breaches with high-performance streaming deep packet inspection, including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.
Application Acceleration
Accelerate your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies, putting them on the Xstream FastPath to optimize performance.

Xstream SD-WAN

The latest SD-WAN capabilities in Sophos Firewall enable extreme network performance, flexibility, and resiliency.

Xstream FastPath Acceleration
Accelerate SD-WAN IPsec VPN tunnel flows taking full advantage of the hardware crypto capabilities in XGS Series appliances.
Performance-Based Routing
Automatically optimize routing and rerouting of traffic based on WAN Link performance (latency, jitter, loss) in real time with zero impact.
Point-and-Click Orchestration
Easily set up the most complex hub-and-spoke or full mesh SD-WAN overlay networks with full tunnel redundancy with just a few clicks.

Powerful Performance

The XGS Series delivers Xstream performance at every price point to power the protection you need for today’s diverse, distributed, and encrypted networks.

Powered by Xstream
Accelerate and offload your important SaaS, SD-WAN, and cloud traffic at the hardware level, while adding performance headroom for TLS and deep packet inspection with integrated Xstream Flow Processors.
High-Speed Connectivity
Customize your firewall’s already versatile connectivity options with an extensive range of add-on modules for high-speed copper, fiber, Power over Ethernet (PoE), and Wi-Fi.
Purpose-Built Performance
Rest assured, your firewall is purpose-built from the core to handle the most demanding workloads with a dual processor architecture, generous memory provisioning, and high-performance solid-state storage.

Central Cloud Management

Sophos Central - The ultimate cybersecurity cloud management platform. Free and easy.

One Console to Manage It All
Sophos Central provides a single cloud management console for all your Sophos products and includes group firewall management at no extra charge.
Reporting in the Cloud
Sophos Central maintains your firewall log data in the cloud with flexible reporting tools that enable you to analyze and visualize your network over time.
Zero-Touch Deployment
Sophos Central enables you to easily deploy new Sophos Firewall devices from Sophos Central without having to touch them.

Powerful Performance

The XGS Series delivers Xstream performance at every price point to power the protection you need for today’s diverse, distributed, and encrypted networks.

Powered by Xstream
Accelerate and offload your important SaaS, SD-WAN, and cloud traffic at the hardware level, while adding performance headroom for TLS and deep packet inspection with integrated Xstream Flow Processors.
High-Speed Connectivity
Customize your firewall’s already versatile connectivity options with an extensive range of add-on modules for high-speed copper, fiber, Power over Ethernet (PoE), and Wi-Fi.
Purpose-Built Performance
Rest assured, your firewall is purpose-built from the core to handle the most demanding workloads with a dual processor architecture, generous memory provisioning, and high-performance solid-state storage.

Enterprise

Sophos Firewall offers the enterprise-grade protection, visibility, and SD-WAN features you need for today’s most demanding networks.

Remote Workers

Sophos Firewall and Zero Trust Network Access offer an easy and scalable solution to enable your remote workers and protect your network.

Cloud

If you have public cloud infrastructure or hybrid networks that need protection, we have a cloud firewall solution for you.

All-in-One

If you’re looking for simpler, consolidated, affordable protection for a small office we’ve got you covered with the best protection and value.

Retail and Branch

Retail and other distributed organizations with lots of branch offices have unique challenges that Sophos Firewall and SD-RED can solve.

Schools

Education institutions have special requirements for compliance and protection that Sophos Firewall has been purpose-built to address.

Powerful Protection and Performance

All the firewall features you need.

Expose Hidden Risks
Superior visibility into risky activity, suspicious traffic, and advanced threats help you regain control of your networks.
Stop Unknown Threats
Powerful next-gen protection technologies like deep learning and intrusion prevention keep your organization secure.
Isolate Infected Systems
Automatic threat response instantly identifies and isolates compromised systems on your network to stop threats from spreading.

Deep Packet Inspection
The Xstream Deep-Packet Inspection (DPI) engine provides high-performance traffic scanning for IPS, AV, Web Protection, and App Control in a single streaming engine.

TLS 1.3 inspection
Next-Gen Intrusion Prevention (IPS)
Zero-day threat protection
Proxy-based dual-engine AV scanning
Perimeter defenses
Country-based blocking policy

Encrypted Traffic
Xstream TLS Inspection 1.3 with industry-leading performance, visibility, policy tools, and built-in intelligence removes an enormous blind spot in your protection.

TLS 1.3 without downgrading
Intelligent traffic selection
Pre-packaged exception list
Powerful policy engine
Covers all ports/protocols
Supports all modern cypher suites
Unmatched visibility and error handing

Zero-Day and ML Protection
Sophos Firewall leverages Sophos' industry-leading machine learning technology, powered by SophosLabs Intelix, to instantly identify the latest ransomware and unknown threats before they get on your network

SophosLabs data scientists
Multiple machine learning models
Static file analysis
Dynamic file analysis

Cloud Sandbox
Sophos Zero-day dynamic file analysis uses next-gen cloud-sandbox technology powered by deep learning and the best technology from Intercept X to protect your organization against zero day threats like the latest ransomware and targeted attacks coming in through phishing, spam, or web downloads.

Dynamic sandboxing analysis
Deep learning static file analysis

Web Protection
Sophos' Web Protection engine is backed by SophosLabs and includes innovative technologies required to identify and block the latest web threats.

Advanced Web Protection
Pharming protection
HTTPS scanning
Potentially unwanted app control
SophosLabs

Synchronized Security
Our revolutionary Security Heartbeat links your Sophos managed endpoint with your firewall to share health and other valuable information enabling an automated and coordinated response to isolate threats and prevent lateral movement.

Security Heartbeat
Destination Heartbeat Protection
Synchronized App Control
Lateral Movement Protection
Synchronized User ID

Advanced Threat Protection
Sophos Firewall delivers advanced threat protection to instantly identify bots and other advanced threats while defending your network from today’s sophisticated attacks.

Security Heartbeat
Multi-layered, call-home protection
Intelligent firewall policies
Traffic light style indicators

User Identity
User identity-based policies and unique user risk analysis give you the knowledge and power to regain control of your users before they become a serious threat to your network.

User identity powers all firewall policies and reporting
User Threat Quotient (UTQ) identifies the top risk users on your network
Synchronized User ID
Flexible authentication options including directory services
Two-factor Authentication (2FA) one-time password support for Access to key system areas

Application Control
Complete visibility and control over all applications on your network with deep-packet scanning technology. Synchronized App Control that can identify all the applications that are currently going unidentified on your network.

Visibility and control over thousands of applications
CASB cloud app visibility
Synchronized App Control
User-based application policies
Traffic shaping (QoS) prioritizes bandwidth allocation to critical applications and limits bandwidth for non-business applications

Web Control
Full visibility and control over all your web traffic with flexible enforcement tools that work the way you need, with options for user and group enforcement of activity, quotas, schedules, and traffic shaping.

Enterprise Secure Web Gateway (SWG) policy model
Template-driven activity control with predefined workplace and compliance policies
Education and SafeSearch features
Comprehensive traffic enforcement
Traffic shaping (QoS)

Content Control
Flexible, user-based monitoring and control of keyword content and downloadable content, including file types via FTP, HTTP, or HTTPS.

Web keyword monitoring
File download filtering templates
Policy-based outbound email DLP
Web caching

Business Applications
Combine next-gen firewall capabilities with our enterprise-class web application firewall to protect your critical business applications from hacks and attacks while still enabling authorized access.

Next-generation IPS
Web Application Firewall
Granular, user-based protection

Email and Data
Protect your email from spam, phishing, and data loss with our unique all-in-one protection that combines policy-based email encryption with DLP and anti-spam.

Full MTA store and forward support
Live anti-spam
SPX encryption
Policy-based DLP
Self-serve user portal

SD-WAN
Xstream SD-WAN in Sophos Firewall includes powerful features to enable your SD-WAN connectivity, quality, security, and continuity goals easily.

Multiple WAN link profiles with flexible application, service, or user-based routing
Real-time performance-based WAN link monitoring (for jitter, latency, and packet loss)
Zero-impact re-routing of traffic to higher performing links in the event of a disruption
Xstream FastPath acceleration of IPsec tunnel traffic
Synchronized SD-WAN application routing of obscure or custom applications

Central SD-WAN Orchestration
Sophos Central cloud managed SD-WAN orchestration makes setting up complex site-to-site SD-WAN overlay networks easy.

Point-and-click to setup full mesh, hub and spoke, or any kind of SD-WAN overlay network
Sophos Central automates all the necessary rule setups on your firewalls
Full tunnel redundancy support
Monitoring and management made easy

Site-to-Site VPN
Sophos Firewall supports all standards-based VPN technologies, as well as our own lightweight extremely robust layer 2 RED tunnels.

IPsec and SSL VPN tunnels
Xstream FastPath acceleration of IPsec tunnel traffic
Wizard-based orchestration
Sophos RED site-to-site tunnels
AWS VPC easy import and management

ZTNA
Sophos Firewall integrates with Sophos Zero Trust Network Access (ZTNA) to offer a secure and simple way for users to securely connect to important applications and data.

Securely connect users to applications
Superior protection from Ransomware and other threats
Cloud and on-premises application support
Remote access from anywhere
Device health integrates with Synchronized Security

Remote Access VPN
Sophos recommends ZTNA for remote access; however, Sophos Firewall also supports legacy remote access via our free Sophos Connect VPN client.

Windows and Mac support
IPsec and SSL support
Easy provisioning and deployment
Free (unlimited SSL remote access licenses included at no extra charge)

SD-RED
A Sophos exclusive, SD-RED provide a unique and affordable secure edge access device for SD-Branch, SOHO, and industrial control solutions.

Zero-touch deployment auto-provisioning SD-WAN edge device
Enterprise-grade encryption
Split tunnel options
Integrated wireless options
Ultra affordable

Wireless Controller
Every Sophos Firewall includes an integrated wireless controllers to enable easy secure wireless deployments for our APX wireless access points, all managed from a single console.

Plug-and-play deployment
High performance with the latest 802.11ac, Wave 2 wireless standard, and powerful radios
Flexible configuration with options for isolation, bridging, zones, hotspots, channel width, and multiple SSIDs per radio.
Secure encryption with support for all the latest standards

Core Networking
Sophos Firewall offers the most advanced enterprise-grade networking technology available for NAT, routing, and bridging.

Powerful object-based NAT rules
Advanced routing with Static, OSPF, BGP, and RIP with full 802.1Q VLAN support
SD-WAN link balancing
Flexible bridging options
IPv6 Certified support

Segmentation
Flexible and powerful segmentation options via zones and VLANs provide ways to separate levels of trust on your network while enabling added protection against lateral movement between different parts of your network.

Zone-based firewall
Default zones for LAN, WAN, DMZ, LOCAL, VPN, and Wi-Fi
Full VLAN support
Zone and VLAN isolation
Zone-based policies
Micro-segmentation and auto-isolation via Synchronized Security

Sophos Central Management
Sophos Central provides powerful centralized management, reporting, and zero-touch deployment for all your Firewalls and other Sophos products from a single console.

Sophos Central Cloud Management
Group Firewall Management in Sophos Central
Synchronize policy and settings across groups
Central cloud backup management
Centralized firmware update scheduling

Central SD-WAN Orchestration
Sophos Central cloud managed SD-WAN orchestration makes setting up complex site-to-site SD-WAN overlay networks easy.

Point-and-click to setup full mesh, hub and spoke, or any kind of SD-WAN overlay network
Sophos Central automates all the necessary rule setups on your firewalls
Full tunnel redundancy support
Monitoring and management made easy

Central Firewall Reporting
Central Firewall Reporting Advanced provides flexible and powerful tools to create your own custom views of network activity and threats across your entire network.

Report across multiple firewalls
Create custom reports with powerful visualization tools
Save, export, and schedule your reports
Store firewall log data in the cloud for historical reporting up to a year

Dashboard and Alerts
Sophos Firewall’s carefully crafted control center analyzes extensive back-end data sources to surface just the information you need to respond quickly to changes in your network.

Instant insights at a glance
Traffic-light-style indicators
Quick Drill-down Interaction with Any Control Center Widget
Automatic email notifications for any important event
SNMP with a Custom MIB and support for IPSec VPN Tunnels

Free Reporting
Sophos Firewall is unique in providing extensive, free on-box reporting and limited cloud-based reporting at no extra charge.

Hundreds of reports
Built-in storage on XGS Series for unlimited log data storage for historical reporting
Live log Viewer
Syslog support
Limited 7 day cloud storage for Central Firewall reporting
No extra charge

Powered by Xstream

Sophos XGS Series firewalls combine the best of two worlds: the flexibility of a high-performance, multi-core CPU for deep-packet inspection, plus the performance benefits of a dedicated Xstream Flow Processor for intelligent application acceleration.

Powerful Protection at Every Price Point

Sophos Firewall and the XGS Series deliver the industry’s best visibility, protection, and performance. From the small branch office to the distributed enterprise, no compromise protection is guaranteed.

We’ve Got the Edge

Sophos Firewall can take your network anywhere it needs to go with an extensive range of modular hardware appliances, cloud and virtual platform support, and secure access edge devices like our SD-RED and APX wireless access points.

Sophos Next-Generation Firewall