EndUser Protection. Peter Skondro. Sophos

Transcription

1 EndUser Protection Peter Skondro Sophos

2 Agenda Sophos EndUser Solutions Endpoint Usecases Sophos Mobile Solutions Mobile Usecases

3 Endpoint

4 Sophos EndUser Solutions EndUser Protection AV Firewall Application Control Data Control Device Control Web Control Patch Assessment SafeGuard Enterprise HDD Encryption File Encryption

5 EndUser Protection Anti-Virus, Client Firewall & Application Control Anti-Virus and HIPS Reliable AV Protection Host Intrusion Prevention System Buffer Overflow Protection Live Protection & URL Filtering Firewall Stops attacks, Worms & Trojans Rule-based on application and/or network level Central management & logging Application Control Controls which applications are allowed to run Predefined applications & application categories e.g. File-Sharing Tools, Browser, Cloud Storage etc. New version definitions are provided automatically

6 EndUser Protection Device Control, Web Control & DLP Device Control Central management, logging &unlocking of devices Selective use of devices for specific computer groups Support of storage media, smartphones & network interfaces Unlocking of specific devices or device modes Web Control Reduces the attack surface of the clients 14 categories of websites (e.g. alcohol, gambling, hacking) Manual definition of additional White- & Blacklists Upgradable in combination with the Sophos Web Appliance or Sophos UTM Data Control Protection against accidental data loss Checks for file type or contents Transmission can be blocked or has to be confirmed by the user Predefined policies and contents are provided

7 EndUser Protection Device Control, Web Control & DLP Patch Assessment Checks operating systems and applications for missing patches Support of Microsoft, Adobe, Oracle, Citrix and others Threats are rated based on real threats HDD Encryption (SafeGuard Enterprise) HDD Encryption based on Sophos technology and/or BitLocker & FileVault2 Pre-Boot- Authentication Integrated password recovery mechanisms File Encryption (SafeGuard Enterprise) File Encryption based on Sophos technology Encryption for Removable Media, File Shares & Cloud Storage Key-Ring concept Portable component available

8 Endpoint Use Cases

9 How to protect mobile workers from web threats? Challenge While being in the company network notebooks are protected from web threats by the corporate firewalls. But what happens when the notebook leaves the secure network? Solution Sophos Endpoint can be used together with the Sophos Web Appliance and UTM Mobile workers are accessing the internet directly but with the current policies defined on the Web Appliance/ UTM.

10 How to prevent the loss of sensitive information? Challenge Sensitive information is found everywhere in the company. How can we prevent that this information is accidently transferred to USB Keys/ applications/web Browsers/Applications? Solution Sophos EndUser Protection provides a set of features that enable you to easily protect your sensitive data Define DLP rules using Data Control, block unwanted applications and disallow the use of USB storage devices

11 How to protect sensitive information? Challenge Nowadays sensitive data can be found on every notebook or USB storage? How can this data be protected when devices get lost or stolen? Solution Sophos Encryption solutions make it possible to appropriately protect data on mobile devices and storage media.

12 How to find out which patches are Challenge important? New patches for business critical applications are introduced every day. How can we figure out which patches are really important for my company? Solution The Sophos Patch component provides all required information on relevant patches. Patches are prioritized so your can first handle the most important ones.

13 Mobile

14 Sophos Mobile Control Central management of Smartphones & Tablets Central management & configuration Central management for mobile devices Configuration distribution (Mail, WLAN, VPN, etc.) Inventory overview Broad platform support Apple ios Android Windows Mobile, Windows Phone 8 & BlackBerry Countermeasures in case loss & theft Lock Wipe Locate (optional)

15 Sophos Mobile Control Compliance, Access Control & App Management Compliance Definition of compliance settings Monitoring of device compliance state Automated actions in case of incompliant devices Control of and network access access control via Exchange Active Sync (EAS) Proxy Network access control via Sophos UTM, Cisco or Checkpoint Only compliant devices get access to company data App Management Installation & Removal of Apps (VPP Support) Enterprise App Store White- & Blacklisting of Apps

16 Sophos Mobile Control Malware Protection, Encryption, On-Premise & SaaS Malware Protection for Android Smartphones & Tablets Central management of the AV component for Android devices Automatic malware scan during App installation & update Web Control prevent access to certain website categories App Control prevent launch of specified applications Mobile Encryption Access to encrypted documents of mobile devices Broad support of Public Cloud Storage providers Support of Private Clouds using WebDAV Purchasing Options On-Premise Installation Software as a Service (SaaS)

17 Mobile Use Cases

18 How to ensure that data on mobile devices is secure? Challenge When a smartphone or tablet is stolen non-authorized persons may have access to sensitive data. How can we protect the data in such situations? Solution Sophos Mobile Control allows you to distribute password policies on all supported platforms including wiping after n unsuccessful login attempts. Additionally you may remotely lock or wipe the smartphone/tablet.

19 How to prevent that personal devices can synchronize with my mail server? Challenge Users can easily transfer the mail server settings from a company device to a personal devices. How do we prevent that unmanaged devices access company mails? Solution Sophos Mobile Control offers compliance settings which block access to company resources in case that unmanaged devices try to connect.

20 How to prevent that personal devices can synchronize with my mail server? Challenge Users can easily transfer the mail server settings from a company device to a personal devices. How do we prevent that unmanaged devices access company mails? Solution Sophos Mobile Control offers compliance settings which block access to company resources in case that unmanaged devices try to connect.

21 How to prevent that non-compliant devices connect to my Wi-Fi or VPN? Challenge Users can easily transfer the Wi-Fi or VPN connection settings to personal devices. How can we prevent that unmanaged devices access our company network? Solution Sophos Mobile Control can be used in combination with network security solutions (e.g. Sophos UTM) to prevent that unmanaged devices connect via Wi-Fi or VPN.

22 SMC & UTM Setup

23 SMC & UTM Setup

24 Network Access Control

25 Push Configuration

26 How to protect Android devices against malware or unwanted apps? Challenge Malware on the Android platform is more and more becoming a problem. How can I protect my users against malware on their smartphones and tablets? How can I prevent that my users access malicious websites or run unwanted applications? Solution Sophos Mobile Control in combination with Sophos Mobile Security protects against malicious apps and websites and also blocks unwanted applications.

27 Thank you