We’re excited to begin the early entry program (EAP) for Sophos DNS Safety for networks. This new cloud-based service is a part of our rising suite of Safe Entry Service Edge services and products, increasing upon what we began with Sophos ZTNA and Sophos SD-WAN Orchestration.
Enhanced web and internet safety
Sophos DNS Safety provides one other layer of safety to each community. It really works to immediately block entry to unsafe and undesirable domains throughout all ports, protocols, and purposes on the earliest alternative – from each managed and unmanaged units.
DNS Safety completely enhances and augments your current community safety and coverage enforcement instruments – from Sophos or another vendor. DNS Safety will be deployed in a couple of minutes: it’s by no means been simpler to roll out further safety to your group.
Sophos DNS Safety is a globally accessible area identify decision service with built-in coverage controls and reporting in Sophos Central. It’s backed by SophosLabs’ real-time menace intelligence, defending your group from malicious area exercise and permitting you to enact coverage for area classes or area lists.
Through the use of Sophos DNS Safety rather than your current public DNS resolver, you may stop any units in your community from accessing domains related to safety threats and different undesirable web sites managed by way of coverage.
DNS Safety enhances the safety offered by the opposite safety features of Sophos Firewall. Deploying it on a community protected by Sophos Firewall gives a further layer of safety that ensures all protocols and ports are protected towards accessing dangerous or inappropriate domains.
Built-in reporting
Sophos DNS Safety gives in-depth visibility into the domains visited out of your community, with complete dashboarding and reporting.
Safety for networks
On this preliminary launch, coverage choice and entry to the DNS Resolver are based mostly on the originating public IPv4 tackle of the DNS queries. Therefore, defending particular person units that transfer from community to community (or website to website) is inappropriate. Dynamic IP addresses are supported when used with a dynamic DNS supplier.
As we develop our Safety Service Edge providers, we plan to combine with the endpoint, offering DNS safety and different network-oriented safety providers for roaming units, wherever they’re.
Cross-product integration
As well as, Sophos DNS Safety’s log knowledge and intelligence are shared with Sophos Knowledge Lake for Sophos XDR and MDR threat-hunting analysts to assist detect energetic adversaries and threats working on the community. Please search for further updates on the XDR integration because the EAP progresses.
Included at no further cost for Sophos Firewall prospects with Xstream Safety
The preliminary launch of DNS Safety is being added to our Xstream Safety bundle, offering further worth to this already wonderful suite of safety options for our current Sophos Firewall prospects.
Getting began
Getting began with Sophos DNS Safety is simple. Replace your current DNS configuration by pointing your units or native DNS servers to our world anycast IP addresses, inform us about your places in your Sophos Central account by coming into your networks’ public IPv4 tackle(es), after which present your suggestions.
To get began, full this registration kind. When you’ve finished that, we’ll electronic mail you with our Getting Began information and all the knowledge you could stand up and operating.
After that, please drop by the Neighborhood Discussion board to share your expertise with different members or inform us about your experiences by way of the in-product suggestions hyperlink.
*Please observe that the preliminary factors of presence for the EAP service are in North America, Europe, and India. Members in different geographies could not expertise the very best question latency. Please monitor your community expertise if you’re outdoors these areas. We’ll develop protection for extra areas sooner or later.
*Early entry is anticipated to run by way of January 2024, so get began at this time and assist us make this service the very best it may be.
