Sophos Endpoint Security & Data Protection ESDJ1DBDP User Manual

Product codes
ESDJ1DBDP
Page of 4
 
» Eliminates known and unknown threats 
with a single, centralized solution 
 
» Detects and removes viruses, spyware, 
rootkits, Trojans, adware and potentially 
unwanted applications (PUAs) 
 
» Without requiring a separate agent, 
scans scans for sensitive information 
being transferred off the network 
 
» Lets you instantly identify vulnerable 
computers to check compliance, update 
policies and clean up threats
 
» Prevents the loss of data by encrypting 
devices and information
 
» Controls applications that can adversely 
impact network and user productivity, 
such as VoIP and IM
 
» Allows assessment of the security 
status of managed and unmanaged 
computers; provides alerts when 
issues such as a disabled patch agent 
or firewall arise, and can provide 
automatic resolution
 
» Enforces protection against unknown 
users gaining access to your network
 
» Lets you rapidly create and update 
security policies, and deploy them across 
multiple groups simultaneously
 
» Centrally deploys small, and frequent 
automatic updates that don’t impact 
network bandwidth or system 
performance
 
» Allows automatic deployment to new 
computers through Active Directory 
synchronization
 
» Reduces administrator workload with its 
ability to share specific tasks with other 
teams through configurable role-based 
administration
 
» Enables a wide range of customized, 
graphical reports to be created, 
scheduled to run and automatically 
emailed
 
» Includes 24x7x365 support for the 
duration of the license and one-on-one 
assistance
Key benefits
Sophos Endpoint Security and Data Protection offers a single integrated solution for both 
anti-malware and data protection. 
A single agent delivers anti-virus and anti-spyware protection, client firewall, data 
leakage prevention (DLP) content monitoring, management of removable storage devices 
and detects and blocks unauthorized software. Combined with integrated network 
access control (NAC) and encryption to ensure policy compliance and secure your data, 
Sophos Endpoint Security and Data Protection gives you the best preventive endpoint 
and data protection, saving you time, money and resources. 
A single license means you can protect all users and computers across Windows, Mac, 
Linux, UNIX and other non-Windows platforms.
Fast and preventive protection
A unified single client blocks malware, adware, suspicious files and behavior, removable 
storage devices and unauthorized software such as IM, VoIP, P2P and games, and provides 
content-aware DLP monitoring for the transfer of sensitive information. Its fast scanning engine 
and built-in intrusion-prevention technologies detect new and zero-day threats without the 
need for a malware signature update. Preventive protection is delivered by integrated network 
access control functionality that ensures all computers connecting to the network meet your 
security standards.
Comprehensive data protection
The combination of a number of different technologies ensures that your data is protected 
against accidental loss. Content scanning integrated into the single agent ensures that all 
sensitive data being transferred by users to removable storage devices and internet-enabled 
applications such as email or instant messaging is detected and can be audited. Granular 
control of removable storage devices enables you to allow the use of specific devices, enforce 
the use of encrypted devices or simply allow read-only access. And full disk encryption 
secures your data on computers, preventing information from getting into the wrong hands if 
devices are lost.
Simplified and automated management
Our management console reduces administrative burden by automating the deployment of 
protection, and simplifying policy management and reporting. The dashboard provides instant 
visibility of the protection status and events across Windows, Mac, Linux and UNIX platforms, 
and enables the centralized cleanup of malware; and fixes non-compliant computers. Role-
based administration enables you to share specific tasks such as cleanup with the help desk 
team. Scheduled reporting means that specific reports can be emailed automatically to the 
people who need them.
Communication 
control
»
 
Client Firewall
Runtime 
control
»
 
HIPS
»
 
Buffer 
  overflow
Network access control
»
 
Compliance reporting
»
 
Patch and vulnerability 
  assessment
»
 
Enforcement
Central
management
Pre-execution 
control
»
 
Anti-virus
»
 
Anti-spyware
»
 
Behaviour blocking
»
 
Application control
Data protection
»
 
Data Control
»
 
Device Control
»
 
Application control
»
 
Encryption  
Sophos Endpoint Security and Data Protection