We’re excited to start out the early entry program (EAP) for Sophos DNS Safety for networks. This new cloud-based service is a part of our rising suite of Safe Entry Service Edge services and products, increasing upon what we began with Sophos ZTNA and Sophos SD-WAN Orchestration.
Enhanced web and net safety
Sophos DNS Safety provides one other layer of safety to each community. It really works to immediately block entry to unsafe and undesirable domains throughout all ports, protocols, and functions on the earliest alternative – from each managed and unmanaged units.
DNS Safety completely enhances and augments your current community safety and coverage enforcement instruments – from Sophos or some other vendor. DNS Safety could be deployed in a couple of minutes: it’s by no means been simpler to roll out further safety to your group.
Sophos DNS Safety is a globally accessible area identify decision service with built-in coverage controls and reporting in Sophos Central. It’s backed by SophosLabs’ real-time risk intelligence, defending your group from malicious area exercise and permitting you to enact coverage for area classes or area lists.
By utilizing Sophos DNS Safety rather than your current public DNS resolver, you possibly can forestall any units in your community from accessing domains related to safety threats and different undesirable web sites managed by way of coverage.
DNS Safety enhances the safety offered by the opposite security measures of Sophos Firewall. Deploying it on a community protected by Sophos Firewall gives a further layer of safety that ensures all protocols and ports are protected in opposition to accessing dangerous or inappropriate domains.
Built-in reporting
Sophos DNS Safety gives in-depth visibility into the domains visited out of your community, with complete dashboarding and reporting.
Safety for networks
On this preliminary launch, coverage choice and entry to the DNS Resolver are primarily based on the originating public IPv4 handle of the DNS queries. Therefore, defending particular person units that transfer from community to community (or website to website) is inappropriate. Dynamic IP addresses are supported when used with a dynamic DNS supplier.
As we broaden our Safety Service Edge providers, we plan to combine with the endpoint, offering DNS safety and different network-oriented safety providers for roaming units, wherever they’re.
Cross-product integration
As well as, Sophos DNS Safety’s log information and intelligence are shared with Sophos Information Lake for Sophos XDR and MDR threat-hunting analysts to assist detect energetic adversaries and threats working on the community. Please search for further updates on the XDR integration because the EAP progresses.
Included at no additional cost for Sophos Firewall prospects with Xstream Safety
The preliminary launch of DNS Safety is being added to our Xstream Safety bundle, offering further worth to this already superb suite of safety options for our current Sophos Firewall prospects.
Getting began
Getting began with Sophos DNS Safety is straightforward. Replace your current DNS configuration by pointing your units or native DNS servers to our world anycast IP addresses, inform us about your areas in your Sophos Central account by coming into your networks’ public IPv4 handle(es), after which present your suggestions.
To get began, full this registration type. When you’ve carried out that, we’ll e-mail you with our Getting Began information and all the data you might want to stand up and working.
After that, please drop by the Group Discussion board to share your expertise with different individuals or inform us about your experiences by way of the in-product suggestions hyperlink.
*Please observe that the preliminary factors of presence for the EAP service are in North America, Europe, and India. Individuals in different geographies could not expertise the most effective question latency. Please monitor your community expertise in case you are outdoors these areas. We are going to broaden protection for extra areas sooner or later.
*Early entry is predicted to run by way of January 2024, so get began at this time and assist us make this service the most effective it may be.
