1. Sophos Network Agent
2. Sophos Network Protection
3. Sophos Network Security

Sophos ZTNA is a brand new cloud-delivered, cloud-managed product to easily and transparently secure important networked applications with granular controls. It’s scheduled to enter early access in February. Sophos ZNTA consists of three components. 1 - Open the Sophos Home application and click on My Activity or Manage Devices button 2 -If applicable, enter your Sophos Home account email and password 3- If desired, check the box for “Allow the current user on this computer to access your dashboard without signing in”.

Corporate. Network. Sophos Products. Sophos named a Visionary in the 2020 Gartner Magic Quadrant for Network Firewalls. How to upgrade to XG. Sophos Anti-Virus for NetApp management This MMC snap-in interface allows configuration of NetApp specific settings, such as, which filers to accept connections from. This is only used during the initial setup. Ongoing Anti-Virus management and reporting are carried out from the Sophos Enterprise Console or the local Sophos Anti-Virus interface.

Sophos Group plc is a British security software and hardware company. Sophos develops products for communication endpoint, encryption, network security, email security, mobile security and unified threat management. Sophos is primarily focused on providing security software to 100- to 5,000-seat organizations. While not a primary focus, Sophos also protects home users, through free and paid antivirus solutions (Sophos Home/Home Premium) intended to demonstrate product functionality. It was listed on the London Stock Exchange until it was acquired by Thoma Bravo in February 2020.

History[edit]

Sophos was founded by Jan Hruska and Peter Lammer and began producing its first antivirus and encryption products in 1985.^[2] During the late 1980s and into the 1990s, Sophos primarily developed and sold a range of security technologies in the UK, including encryption tools available for most users (private or business). In the late 1990s, Sophos concentrated its efforts on the development and sale of antivirus technology, and embarked on a program of international expansion.^[3]

In 2003, Sophos acquired ActiveState, a North American software company that developed anti-spam software. At that time viruses were being spread primarily through email spam and this allowed Sophos to produce a combined anti-spam and antivirus solution.^[4] In 2006, Peter Gyenes and Steve Munford were named chairman and CEO of Sophos, respectively. Jan Hruska and Peter Lammer remain as members of the board of directors.^[5] In 2010, the majority interest of Sophos was sold to Apax.^[6] In 2010, Nick Bray, formerly Group CFO at Micro Focus International, was named CFO of Sophos.^[7]

In 2011, Utimaco Safeware AG (acquired by Sophos in 2008–9) were accused of supplying data monitoring and tracking software to partners that have sold to governments such as Syria: Sophos issued a statement of apology and confirmed that they had suspended their relationship with the partners in question and launched an investigation.^[8][9] In 2012, Kris Hagerman, formerly CEO at Corel Corporation, was named CEO of Sophos and joined the company's board. Former CEO Steve Munford became non-executive chairman of the board.^[10] In February 2014, Sophos announced that it had acquired Cyberoam Technologies, a provider of network security products.^[11] In June 2015, Sophos announced plans to raise $US100 million on the London Stock Exchange.^[12] Sophos was floated on the FTSE in September 2015.^[13]

On 14 October 2019 Sophos announced that Thoma Bravo, a US-based private equity firm, made an offer to acquire Sophos for US$7.40 per share, representing an enterprise value of approximately $3.9 billion. The board of directors of Sophos stated their intention to unanimously recommend the offer to the company's shareholders.^[14] On 2 March 2020 Sophos announced the completion of the acquisition.^[15]

Acquisitions and partnerships[edit]

From September 2003 to February 2006, Sophos served as the parent company of ActiveState, a developer of programming tools for dynamic programming languages: in February 2006, ActiveState became an independent company when it was sold to Vancouver-based venture capitalist firm Pender Financial.^[16] In 2007, Sophos acquired ENDFORCE, a company based in Ohio, United States, which developed and sold security policy compliance and Network Access Control (NAC) software.^[17][18] In November 2016, Sophos acquired Barricade, a pioneering start-up with a powerful behavior-based analytics engine built on machine learning techniques,^[19] to strengthen synchronized security capabilities and next-generation network and endpoint protection. In February 2017, Sophos acquired Invincea, a software company that provides malware threat detection, prevention, and pre-breach forensic intelligence.^[20][21][22]

In March 2020, Thoma Bravo acquired Sophos for $3.9 billion.^[23]

See also[edit]

References[edit]

1. ^ ^abcd'Annual Report 2018'(PDF). Sophos. Retrieved 20 March 2019.
2. ^'Sophos: the early years'. Naked Security.
3. ^'Exterminator Tools'. Windows IT Pro. 15 November 1999. Retrieved 24 April 2017.
4. ^'Sophos acquires anti-spam specialist ActiveState'. www.sophos.com. Retrieved 3 January 2016.
5. ^'Sophos Management Team | Global Leaders in IT Security'. sophos.com.
6. ^'Apax Partners to acquire majority stake in Sophos'.
7. ^'Board of Directors'.
8. ^'The Bureau Investigates article'. Archived from the original on 4 December 2011.
9. ^'Statement from Sophos on Recent Media Reports'.
10. ^'Sophos Board of Directors webpage'.
11. ^'Sophos Acquires Cyberoam to Boost Layered Defense Portfolio'. Infosecurity Magazine.
12. ^'Sophos Plans $100 Million London IPO'.
13. ^'Sophos joins the UK's top public companies in the FTSE 250'.
14. ^'Sophos founders exit before Thoma Bravo sale'. Global Capital. 5 December 2019. Retrieved 25 February 2020.
15. ^'Sophos opens new chapter with take-private acquisition'.
16. ^'ActiveState Acquired by Employees and Pender Financial Group; Company Renews Focus on Tools and Solutions for Dynamic Languages'. Business Wire. 22 February 2006. Retrieved 24 April 2017.
17. ^'Sophos buys Endforce for network access control'. Network World. 11 January 2007. Retrieved 24 April 2017.
18. ^Wauters, Robin. 'Sophos beefs up on online security, acquires Dutch security software firm SurfRight for $31.8 million'. Retrieved 2 August 2016.
19. ^https://www.sophos.com/en-us/press-office/press-releases/2016/11/sophos-acquires-security-analytics-start-up-in-ireland.aspx
20. ^'Sophos Adds Advanced Machine Learning to Its Next-Generation Endpoint Protection Portfolio with Acquisition of Invincea'. Sophos. 8 February 2017. Retrieved 11 February 2017.
21. ^'Sophos grows anti-malware ensemble with Invincea'. Sophos. 8 February 2017. Retrieved 11 February 2017. One may ask, if you already have great next-generation technology, why do you need Invincea’s technology?...Think of Invincea as the superhero that takes our ensemble to the next level – the entity that adds neural network-based machine learning to the team.
22. ^'Sophos to Acquire Invincea to Add Industry Leading Machine Learning to its Next Generation Endpoint Protection Portfolio'. Invincea. 8 February 2017. Retrieved 11 February 2017.
23. ^'Thoma Bravo completes $3.9B Sophos acquisition'. TechCrunch. Retrieved 7 April 2020.

Sophos Network Agent

External links[edit]

As we get closer to launching the early-access program (EAP) for Sophos ZTNA, we wanted to answer a lot of your questions about our solution and what to expect.

You can learn more about ZTNA and register for the early-access program today to stay informed and be the first to know when the EAP starts.

Early-access program registration

The early-access program is expected to start in early March. Learn more and register for the EAP today at sophos.com/ztna!

Frequently asked questions about Sophos ZTNA

What is ZTNA all about?

Please review this previous article for a great overview of Zero Trust Network Access.

What are the benefits of ZTNA compared to remote-access VPN?

While remote-access VPN continues to serve us well, ZTNA offers a number of added benefits that make it a more attractive solution for connecting users to important applications and data:

• More granular control: ZTNA allows more granular control over who can access applications and data, minimizing lateral movement and improving segmentation. VPN is all-or-nothing: once on the network, VPN generally offers access to everything.
• Better security: ZTNA removes implicit trust and incorporates device status and health in access policies that further enhances security. VPN does not consider device status, which can put application data at risk to a compromised or non-compliant device.
• Easier to enroll staff: ZTNA is much easier to roll out and enroll new employees, especially if they are working remotely. VPN is more challenging and difficult to set up and deploy.
• Transparent to users: ZTNA offers “just works” transparency to users with frictionless connection management. VPN can be difficult and prone to initiating support calls.

What does Sophos ZTNA include?

Sophos ZTNA is a brand new cloud-delivered, cloud-managed product to easily and transparently secure important networked applications with granular controls. It’s scheduled to enter early access soon.

Sophos ZTNA consists of three components:

• Sophos Central provides the ultimate cloud management and reporting solution for all Sophos products, including Sophos ZTNA. Sophos ZTNA is fully cloud-enabled, with Sophos Central providing easy deployment, granular policy management, and insightful reporting from the cloud.
• Sophos ZTNA Gateway will come as a virtual appliance for a variety of platforms to secure networked applications on-premise or in the public cloud, with AWS and VMware ESXi support available initially, closely followed by Azure, Hyper-V, Nutanix, and others.
• Sophos ZTNA Client provides transparent and frictionless connectivity to controlled applications for end users based on identity and device health. It will integrate with Synchronized Security for Heartbeat and device health. It is super easy to deploy from Sophos Central, with an option to deploy alongside Intercept X with just one click, or it can work stand-alone with any desktop AV client (obtaining health status from Windows Security Center). It will initially support Windows, followed by macOS, and later Linux and mobile device platforms as well.

When will Sophos ZTNA be available?

The first phase of the early-access program (EAP) is targeted for early March. Launch is expected to be around mid-year 2021. You can register now for the EAP.

Which types of applications are ideal for ZTNA?

Sophos ZTNA can provide secure connectivity for any networked application hosted on the company’s on-premise network, or in the public cloud or any other hosting site. Everything from RDP access to network file shares to applications like Jira, wikis, source code repositories, support and ticketing apps, etc.

ZTNA does not control access to SaaS applications like Salesforce.com or Office365, which are public internet-facing applications servicing many customers by design. Secure access to these applications is provided by the SaaS vendor and the application, and is often further enhanced through multi-factor authentication.

Which client, gateway, and identity platforms will be supported?

• Client platforms will initially include a clientless option across all client platforms (EAP1), native Windows support (EAP2 and GA), macOS support (early 2022), and then Linux and mobile device platforms (iOS and Android) in the future. Device health will initially be assessed via Synchronized Security Heartbeat status (EAP2 and GA), followed by Windows Security Center (early 2022), with additional device assessments to be integrated in the future.
• Gateway platforms will be virtual appliances only (no hardware) and initially include VMware ESXi for EAP1, then AWS public cloud for EAP2 and GA. This will be expanded to include other platforms like Azure, Hyper-V, Nutanix, K8S, and GCP following launch.
• For identity, Sophos ZTNA will initially support Azure Active Directory (AD) for EAP 1 and Okta in EAP2. Supported directory services for EAP 2 and GA include Azure and on-premise AD (including AD Sync supported by Sophos Central today). Customers can take advantage of Azure’s MFA options right away, with support for third-party MFA solutions coming in a future release.

Is ZTNA a stand-alone product or does it require another Sophos product?

Sophos ZTNA is a stand-alone product and does not require any other Sophos Products. It is managed by Sophos Central, which is free, and obviously offers a ton of benefits when customers have other Sophos products. It can easily deploy alongside Intercept X, but Intercept X is not a requirement. Sophos ZTNA can also work alongside any vendor’s desktop AV or firewall.

How will Sophos ZTNA client deployment work?

Sophos ZTNA will be an easy-to-deploy option alongside Intercept X and device encryption when protecting devices from Sophos Central, as shown below…

Will ZTNA integrate with Sophos XG Firewall and Intercept X?

Sophos ZTNA is fully compatible with XG Firewall and Sophos Intercept X. In fact, it takes advantage of Security Heartbeat to assess device health, which can be used in ZTNA policies.

As mentioned above, deployment of the ZTNA client can easily happen as part of an Intercept X roll-out: it’s as simple as checking a box. Of course, Sophos ZTNA can also work perfectly with other vendor desktop AV or firewall products, but it will work better together with Sophos products such as XG Firewall and Intercept X.

How will licensing and pricing work?

Sophos ZTNA will be licensed on a user basis like our endpoint products, not per user-device. So if a user has three devices, they only require one license.

Customers can deploy as many ZTNA gateways as they need to protect all their apps. There is no charge for the gateway or for Sophos Central management.

How does ZTNA compare to…

DUO?

DUO is an identity technology provider focused on multi-factor authentication (MFA) to help users verify their identity. Identity and MFA – and thus DUO – are parts of a ZTNA solution. ZTNA also verifies device health. Sophos ZTNA will initially support Azure MFA and any identity provider that integrates with Azure, including Duo and other MFA solutions as well.

NAC?

NAC and ZTNA technologies may sound similar as they are both about providing access, but that’s where the similarities end. Network access control (NAC) is concerned with controlling physical access to a local on-premise network, while ZTNA is concerned with controlling access to data and specific network applications regardless of which network they are on.

VPN?

While remote-access VPN has served us well, ZTNA has a number of benefits when compared to VPN, as outlined above. Of course, there will be some situations where VPN continues to be a good solution: where a relatively small number of people (e.g. the IT department) needs broad access to network applications and services to manage them.

VPN will still be instrumental for site-to-site connectivity but for most organizations’ users, ZTNA can replace remote-access VPN to provide a better, more granular security solution – all while being more transparent and easier for users.

Sophos Network Protection

Firewalls?

ZTNA is complimentary to a firewall just like VPN is complimentary to a firewall. The firewall still plays a critically important role in protecting corporate network and data center assets from attacks, threats, and unauthorized access. ZTNA bolsters a firewall by adding granular controls and security for networked applications in the cloud or on-premise.

WAF?

WAF and ZTNA are designed to protect different types of applications from different types of users. WAF is designed to protect and secure public applications by providing firewall, threat detection, and other hardening like SQL injection attack defenses. ZTNA is designed to control access to internal applications. It is not designed to provide public access; in fact, it is designed to ensure public users cannot access ZTNA-protected apps.

Synchronized Security?

ZTNA and Synchronized Security are both conceptually similar in that they both can use device health to determine network access privileges. In fact, Sophos ZTNA will use Security Heartbeat as a key component in assessing device health.

If a user has a device with a red Heartbeat, their application access can be limited through policy, just as their network access can be limited on the firewall. However, ZTNA goes further than Synchronized Security by also integrating user identity verification.

ZTNA is also more about controlling privilege and access to applications, while Synchronized Security is more about automated response to threats and preventing threats from moving or stealing data.

Sophos Network Security

SASE?

SASE (pronounced “sassy”) or secure access service edge, is about the cloud delivery of networking and security, and includes many components such as firewalls, SD-WAN, secure web gateways, CASB, and ZTNA. It’s designed to secure any user on any network, anywhere through the cloud. So as you can see, ZTNA is a component of SASE and will be an essential part of our overall SASE strategy.

To learn more about Sophos ZTNA and sign up for the early-access program, visit our ZTNA website.