Sophos Firewall Features: Xstream Technology For Enhanced Security And Performance.pdf

## Sophos Firewall Features Summary

The Sophos Firewall offers a comprehensive security solution with advanced capabilities across several key areas:

Core Protection & Performance:

Xstream Architecture: Provides exceptional visibility, protection, and performance through stream-based packet processing.
Xstream TLS Inspection: High-performance TLS 1.3 support, enterprise-grade policies, compatibility troubleshooting, and unique dashboard insights.
Xstream DPI Engine: Stream scanning for IPS, AV, web, app control, and TLS inspection in a single powerful engine.
Xstream Network Flow FastPath: Policy-driven acceleration of trusted traffic, IPSec VPN tunnels, and TLS encrypted traffic.

Network Management & Visibility:

Intuitive Interface: Purpose-built UI with traffic light indicators for quick status at-a-glance.
Control Center: Provides instant insights into endpoint health, unknown applications, cloud apps, suspicious payloads, risky users, and network attacks.
Policy Control Center: Monitors policy activity, tracks unused/disabled policies, and offers easy management.
Unified Policy Model: Combines firewall, NAT, and TLS inspection rules for simplified configuration.
Streamlined Rule Management: Efficiently manage large rule sets with custom grouping, mouse-over features, and enforcement indicators.
Pre-defined Policies: Out-of-the-box policies for common scenarios like CIPA and workplace policies.

Threat Detection & Response:

Sophos Security Heartbeat: Shares endpoint health data between endpoints and the firewall for instant identification of compromised systems.
Active Threat Response: Identifies, blocks, and automatically responds to active adversaries using SophosLabs threat intelligence.
Synchronized Application Control: Automatically identifies and controls unknown Mac/Windows apps on the network.
Cloud Application Visibility: Instantly discovers shadow IT and allows one-click traffic shaping.

Advanced Features:

User Threat Quotient: Identifies risky users based on browsing behavior.
Configuration API: Integrates with RMM/PSA tools for automated management.
Cloud-based NDR Integration: Enhances active adversary detection.
Integrated ZTNA Gateway: Enables secure access to applications from anywhere.
Sophos Central: Cloud-based management and reporting for multiple firewalls, providing group policy management and centralized control.

Management & Deployment:

Easy Setup & Configuration: Streamlined setup wizard, zero-touch deployment in Sophos Central, and seamless integration with Sophos MDR/XDR.
Advanced Logging & Troubleshooting: Comprehensive logging tools, packet capture, and troubleshooting aids.
High Availability: Active-active or active-passive clustering for redundancy.
Flexible Policy Control: User, group, time, or network-based policies; access time controls; zone-based policy support.
Routing & VLAN Support: Static, dynamic, and multicast routing; VLAN DHCP; bridging with STP; Jumbo Frame support.