We’re excited to begin the early entry program (EAP) for Sophos DNS Safety for networks. This new cloud-based service is a part of our rising suite of Safe Entry Service Edge services and products, increasing upon what we began with Sophos ZTNA and Sophos SD-WAN Orchestration.
Enhanced web and internet safety
Sophos DNS Safety provides one other layer of safety to each community. It really works to immediately block entry to unsafe and undesirable domains throughout all ports, protocols, and purposes on the earliest alternative – from each managed and unmanaged units.
DNS Safety completely enhances and augments your current community safety and coverage enforcement instruments – from Sophos or some other vendor. DNS Safety could be deployed in a couple of minutes: it’s by no means been simpler to roll out extra safety to your group.
Sophos DNS Safety is a globally accessible area identify decision service with built-in coverage controls and reporting in Sophos Central. It’s backed by SophosLabs’ real-time risk intelligence, defending your group from malicious area exercise and permitting you to enact coverage for area classes or area lists.
Through the use of Sophos DNS Safety instead of your current public DNS resolver, you possibly can stop any units in your community from accessing domains related to safety threats and different undesirable web sites managed by means of coverage.
DNS Safety enhances the safety supplied by the opposite security measures of Sophos Firewall. Deploying it on a community protected by Sophos Firewall gives a further layer of safety that ensures all protocols and ports are protected towards accessing dangerous or inappropriate domains.
Built-in reporting
Sophos DNS Safety gives in-depth visibility into the domains visited out of your community, with complete dashboarding and reporting.
Safety for networks
On this preliminary launch, coverage choice and entry to the DNS Resolver are primarily based on the originating public IPv4 deal with of the DNS queries. Therefore, defending particular person units that transfer from community to community (or web site to web site) is inappropriate. Dynamic IP addresses are supported when used with a dynamic DNS supplier.
As we develop our Safety Service Edge providers, we plan to combine with the endpoint, offering DNS safety and different network-oriented safety providers for roaming units, wherever they’re.
Cross-product integration
As well as, Sophos DNS Safety’s log information and intelligence are shared with Sophos Information Lake for Sophos XDR and MDR threat-hunting analysts to assist detect energetic adversaries and threats working on the community. Please search for extra updates on the XDR integration because the EAP progresses.
Included at no further cost for Sophos Firewall clients with Xstream Safety
The preliminary launch of DNS Safety is being added to our Xstream Safety bundle, offering extra worth to this already wonderful suite of safety options for our current Sophos Firewall clients.
Getting began
Getting began with Sophos DNS Safety is simple. Replace your current DNS configuration by pointing your units or native DNS servers to our international anycast IP addresses, inform us about your areas in your Sophos Central account by coming into your networks’ public IPv4 deal with(es), after which present your suggestions.
To get began, full this registration type. When you’ve completed that, we’ll electronic mail you with our Getting Began information and all the knowledge it’s worthwhile to stand up and working.
After that, please drop by the Neighborhood Discussion board to share your expertise with different individuals or inform us about your experiences by means of the in-product suggestions hyperlink.
*Please notice that the preliminary factors of presence for the EAP service are in North America, Europe, and India. Contributors in different geographies could not expertise the perfect question latency. Please monitor your community expertise if you’re outdoors these areas. We’ll develop protection for added areas sooner or later.
*Early entry is predicted to run by means of January 2024, so get began as we speak and assist us make this service the perfect it may be.