Never mind the Endpoint Sophos is a Network Security company too Chris Weeds, Director Product Marketing and Greg Iddon, Sales Engineer October 2015 1
NEVER MIND THE ENDPOINT HERE S SOPHOS SOPHOS IS A THE Chris Weeds, Director Product Marketing and Greg Iddon, Sales Engineer October 2015 2
Only Vendor That Is a Gartner Leader in EP and UTM Gartner Magic Quadrant ENDPOINT PROTECTION Gartner Magic Quadrant UNIFIED THREAT MANAGEMENT This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Sophos Inc. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. All statements in this report attributable to Gartner represent Sophos interpretation of data, research opinion or viewpoints published as part of a syndicated subscription service by Gartner, Inc., and have not been reviewed by Gartner. Each Gartner publication speaks as of its original publication date (and not as of the date of this presentation). The opinions expressed in Gartner publications are not representations of fact, and are subject to change without notice. 3
Unique Balance Between Endpoint and Network ENDPOINT NETWORK 10.8% 49.96% 100.0% 93.7% 100.0% 100.0% 100.0% 100.0% 100.0% 100.0% 100.0% 100.0% 89.2% 50.04% 6.3% 4
Today s Set List 1. Sophos Network Security Portfolio 2. Top complaints about Firewalls 3. How Sophos UTM Wins Today 4. Project Copernicus: Sophos Firewall 5. How to get started selling Bonus Track: 7. The Competition 5
Sophos Network Security Portfolio Accelerate NGFW/UTM Combine the strengths of Sophos and Cyberoam Grow Secure Web Gateway Revitalize technology and launch a hybrid offering Grow Secure Email Gateway Revitalize technology and launch a cloud offering UTM/Next-Gen Firewall IPS Application Control User-based Policies Web filtering Email security Secure Wi-FI RED (Remote Ethernet Device) iview Reporting Secure Web Appliance Virtual Web Appliance Cloud Web Gateway Secure E-mail Appliance Virtual E-mail Appliance PureMessage for Unix PureMessage for Exchange Sophos UTM Manager (SUM) Sophos UTM for Amazon Web Services Cloud Email Gateway 6
Secure Web Gateway solutions for every buyer 7
Secure Email Gateway solutions for every buyer UTM Dedicated Email Appliances For Exchange For UNIX Software Cloud Services Anti-Spam Anti-Virus Encryption Data Leak Prevention Email Archiving 8
Why buyers choose Sophos for UTM/Firewall 9
Top complaints about current firewalls IT Manager Survey on SpiceWorks Insufficient reporting & visibility Insufficient security & control Not easy to manage Poor value Profit Poor performance 10
How Sophos Wins More and more organizations are switching to Sophos for their next firewall 1. Simpler 2. Faster 3. On-box reporting 4. All-in-one protection 5. Trusted industry leader 11
1. Simpler 12
Simplifying common tasks 45 40 35 30 25 20 15 10 5 0 Firewall Rule App Control Policy Email Activiation HTTPS Filtering Sophos UTM Competitor Firewall 13
How SPX Encryption works < Sender composes their email exactly the same way as usual < They can force encryption using the new SPX Encrypt button Add-in for Outlook Or encryption can happen automatically based on the presence of sensitive data detected by the UTM \/ < The contents of the mail are encapsulated in an encrypted PDF before leaving the network 14
How SPX Encryption works Recipient Replying securely is equally as easy /\ /\ The recipient receives an email with the encrypted PDF attached to their regular inbox /\ They simply enter the required password to decrypt the contents and view the message and attachments > 15
How SPX Encryption works On any device < SPX Encrypted emails are viewable on any device that supports PDFs < Branding is customizable < A great advantage is that your encrypted mail is in your inbox with the rest of your mail and can be viewed even when you re offline 16
2. Faster 17
SG Series Appliance Portfolio Hardware Appliance Soon: SG 85 SG 105 / 115 SG 125 / 135 SG 210 / 230 SG 310 / 330 SG 430 / 450 SG 550 SG 650 Soon: SG 750 Category Small Desktop Small Desktop Small Desktop Medium Midrange 1U Medium Midrange 1U Medium Midrange 1U Large High-end 2U Large High-end 2U Large High-end 2U Network Ports (standard) 4 4 8 6 8 & 2 SFP 8 (FleXi Port) 8 (FleXi Port) 8 (FleXi Port) 8 (FleXi Port) FleXi Port Expansion Bays n/a n/a n/a 1 1 2 3 4 8 Maximum Ports 4 4 8 14 18 24 24 32 64 Redundancy n/a n/a n/a n/a n/a 2 SSD (RAID) & 2 nd hot-swap power optional (SG 450 only) 2 hot-swap SSD (RAID) 2 hot-swap power supplies 2 hot-swap SSD (RAID) 2 hot-swap power supplies 2 hot-swap SSD (RAID) 2 hot-swap power supplies Wireless Integr. 802.11n optional Integr. 802.11n optional Integr. 802.11ac optional n/a n/a n/a n/a n/a n/a 18
Lightening speed with AV proxy scanning 19
3. On-Box Reporting 20
All-in-One includes Reporting Complete on-box reporting Standard! 21
4. All-in-One Protection 22
One Box Solution Refers to functionality included in a unified solution only.. = Comparable functionality with separate appliance only,.. = Requires Sophos Mobile Control subscription. 24
Project Copernicus: Sophos Firewall 25
Project Copernicus: Sophos Firewall OS Leading Threat Protection RED for Distributed Networks Secure Wi-Fi & Access Points Web Protection Technologies Layer 8 User Identity Policies Leading Application Control Accelerated Packet Filtering User Threat Quoient + New innovations Security Heartbeat Interactive Control Center Simplified Policy Authoring Expanded reporting 26
Sophos Firewall: What does it include? Heartbeat Sophos Firewall OS (SF-OS) New Firewall Operating System and Software Platform Proven Appliances Identical to SG Series except come preloaded with SF-OS Security Heartbeat Support for Security Heartbeat with Sophos Cloud Endpoints Migration Tools Early next year for migrating UTM 9 to SF-OS Sophos Firewall Manager (SFM) New on-premise Centralized Management Sophos Cloud Firewall Manager (CFM) Centralized Firewall Management in the Cloud (for partners only initially) Sophos iview Reporting Updated on-premise Centralized Reporting 27
How does Sophos Firewall strengthen our story? 1. Simpler 2. Faster 3. On-box reporting 4. All-in-one protection 5. Trusted industry leader 28
1. Simpler 29
30
Unified Policy Management Don t need to navigate multiple modules, or tabs to find polices All policies on one screen Users & Networking Business Applications Sort and Filter by Rule type Source Zone Destination Zone Status 31
Integrated Policies Everything on one screen Layer-8 User Identity Polices Zone based policies Web and App Control per policy IPS and Traffic Flow per Policy Security Heartbeat Policy Limit access for Red or Yellow Heartbeats 32
Business App Policy Templates Templates simplify WAF protection for common business applications Exchange Sharepoint Lync And Much More Templates can be customized Templates can be shared 33
Sophos Firewall: Simply solving common problems Difficult to identify and prioritize issues Complexity of policy creation and management Firewalls full of jargon and difficult to navigate Interactive dashboard instant data and drilldown Policy templates, easy to understand Self-documenting interface and menus 34
2. Faster 35
FastPath Packet Optimization Policy Engine (Who are you? Where are you going?) Malware Engine (Are you carrying anything dangerous?) FastPath Packet Optimization (e.g. for approved traffic travelling together ) Stream scanning (e.g. visual inspection only) FastPath optimizes firewall connectivity and routing Once connection is deemed trusted, all related packets take the fast path It is NOT Stream scanning which lightly scans packets as they pass for malware We properly scan all content in real-time or batch mode we do not stream scan 36
3. On-Box Reporting 37
38
New Application and User Risk Analysis App Risk Meter Identifies overall risk level Application dashboard identifies risky apps and who s using them User Risk Quotient (UTQ) Identifies risky users Based on recent web browsing history and advanced threat event triggers 39
Security Heartbeat & Advanced Threats Accelerated discovery Positive identification Automated response Instant insights into compromised systems Hostname, IP User Time period Threat App/Process Incidents/Count 40
4. All-in-One Protection 41
Competitive Chart $ = Another product required New Differentiators New competitive differentiators Security Heartbeat Unified policy User Threat Quotient New comparative differentiators FastPath Discover Mode User-based Firewall Policies 42
Summary 45
How does Sophos Firewall strengthen our story? 1. Simpler: Solving top firewall usability issues 2. Faster: FastPath packet optimization 3. On-box reporting: UTQ and App Risk 4. All-in-one protection: Revolutionary Security Heartbeat 5. Trusted industry leader: One of 3 46
Sophos Firewall: Making it easier to grow your business Easier to Sell Easier to Demo / PoC Easier to Manage Easier to Cross-Sell Simpler Faster More-in-one Reporting Leader 5-Reasons Sophos is better than Competitors Discover (TAP) Mode Sophos Firewall Manager Cloud Firewall Manager iview Reporting Wireless APs / RED New: Centralized Management Centralized Reporting 47
Two platforms in parallel? Initial Target Market Segments SF-OS Targeting New Prospects or Customers with no UTM Cloud customers (gain Security Heartbeat) SEC customers migrating to Cloud (more reason to switch) UTM 9 Business as usual for existing UTM customers We WILL look after them! Don t worry about migration just yet Consider at renewal Or when migration tools available (CQ1) 48
Migration Guidance For Your Customers Free upgrade to SF-OS Automatic licensing migration Supports ing/sg + refresh program New capabilities for all customers! For You 2 year active development on existing platforms Rich education programs/certification Partner exclusive early access programs CY 2015 CY 2016 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 SUM 4.3 EAL4+ V9.35 RED Wifi App Accuracy MESH impr Copernicus V1 V9.4 Migration Sandbox subsc SG85, AP15C, RED15W V9.5 More features & performance V1.5 V2 V3 V10.6.3 MR MR MR 49
Lots of Opportunity in the UK: Sophos Network Security Portfolio Accelerate NGFW/UTM Combine the strengths of Sophos and Cyberoam Grow Secure Web Gateway Revitalize technology and launch a hybrid offering Grow Secure Email Gateway Revitalize technology and launch a cloud offering UTM/Next-Gen Firewall IPS Application Control User-based Policies Web filtering Email security Secure Wi-FI RED (Remote Ethernet Device) iview Reporting Secure Web Appliance Virtual Web Appliance Cloud Web Gateway (Q2) Secure E-mail Appliance Virtual E-mail Appliance PureMessage for Unix PureMessage for Exchange Sophos UTM Manager (SUM) Sophos UTM for Amazon Web Services 52
How to get started selling? The Partner Portal Announcements Videos Webcasts Feature Comparisons Training Powerpoints/PDFs https://partnerportal.sophos.com 53
Questions? 54
Coffee Break 55
Sophos Ltd. All rights reserved. 56