The Sophos Firewall Distributor in Kenya

Every corporate organization should have a network firewall that guarantees protection and high performance. Apart from, the mandatory protection modules such as Intrusion prevention, anti-Spam, Web security, application control, the network firewall should have an architecture that delivers increased visibility. Forty Servers is an authorized distributor of Sophos Firewall in Kenya. Besides cybersecurity consultancy, we also supply and install Sophos XG firewall. And, we assure our clients of the best after-sales support. Also installers of VoIP PBX system.

Indeed Sophos incorporates very innovative network protection features. For instance, the Sophos Security Heartbeat technology enables endpoints to share health status with the firewall. This seamless interaction leads to faster malware detection, device isolation, and application cleaning without affecting the healthy endpoints. Still, there is the Lateral Movement Protection feature. Now, this feature stops all traffic coming from compromised endpoints from reaching healthy computers. In so doing, affected files and applications will be stopped from spreading further into the entire network. As a matter of fact, Sophos is the best next-gen firewall that will guarantee unified protection.

Features of the Sophos Firewall

Network protection

This module includes the Intrusion Prevention System (IPS). It uses deep packet inspection technology for maximum network security and protection. The network protection module has the ability to detect and block malicious traffic entering a network. This happens by continuously monitoring all endpoints. When malicious activity is detected, the compromised endpoint will be identified and isolated automatically.

The advanced threat protection and security heartbeat technology will not only identify the affected endpoint but also the application process compromised. Furthermore, Sophos security heartbeat will capture incident count including the time attack happened.

The isolated endpoint computer will not be able to communicate with the rest of the computers within the network until all processes have been cleaned and restored. Through lateral movement protection technology, the healthy computers will automatically reject traffic from the infected computers stopping further spreading of the malware. All these happen in a matter of seconds without human intervention. An activity log will be kept for system audit and analysis.

Web protection

The web protection module acts as a proxy for anti-malware. This module also provides a web filtering service. More importantly, this subscription will lead to pharming protection, web content caching, and web malware protection. Potentially unwanted applications can be easily be scanned and blocked including web malware, spyware on FTP, and HTTP protocol using this service.

The web protection and control subscription enable the network security manager to create and implement web surfing quotas for internet users. Therefore network manager will create user access policies and apply them. Another set of policies will be created to set a limit for download and upload speeds for specific applications. Hence, the IT manager can limit bandwidth for social media applications. On the other side, web traffic can be guaranteed for critical business applications such as the call center software and the CRM.

Email protection

Be that as it may, network spamming and malware attacks tend to be spread through unsecured email gateway. The email protection subscription will activate automated scanning for all emailing protocols e.g. IMAP, POP3, and SMTP. In fact, the email protection and control module use recurrent pattern detection technology to gauge the reputation of the sender’s domain.

The anti-spam live engine looks up the threat intelligence database before accepting emails. The real-time email protection service has the ability to detect phishing links with an email. The email protection and control module can also detect corrupted email attachments and the affected email dropped. At the end of the day, a list of allowed senders will be updated. Likewise, a list of blocked senders’ domains will be maintained in the email protection engine.

Web server protection

Server protection remains a key consideration in a corporate network. Web server security is a web firewall application protection module that helps in hardening the server engine. When the webserver is hardened, the database will be protected against SQL injection attacks. This is because the webserver protection subscription activates reverse proxy, cross-site scripting protection, and even server abstraction. More importantly, the integrated load balancer will be able to spread visitors across various servers, whether virtual servers and physical servers.

Sandstorm protection module

When integrated into the Sophos security platform, sandstorm cloud sandbox protection scans document files and blocks affected .doc, .docx, and PDF files. Also, it scans executable files, particularly, those files with .exe and .dll extensions. Thus, no corrupted file will be allowed into the corporate network. This service includes Cryptoguard protection technology that enhances network and application security.

Be that as it may, file compression tools such as RAR and ZIP play a very important role when used responsibly. However, these tools can also be used by cybercriminals to spread to launch a malware attack. Sophos Firewall uses machine learning technology to scan all foreign files and only allows those files labeled as clean. As a matter of fact, users can be provided with one time secure download links powered by Sophos.

Central firewall reporting

Sophos has a cloud-based central firewall reporting dashboard that enables viewing of all events at a glance. Once logged in, the dashboard presents the user with system health information, synchronized apps, blocked apps, etc. Also, the user will be able to see information about users e.g. live users, live connections, remote users, wireless clients, etc. The network security admin can drill down further to reveal more information about a particular report. All firewall reports can be downloaded in various formats such as HTML, PDF, and Excel. Moreover, the network security administrator can download logs and back them up for future audit requirements.