Sophos announced that its next-generation Sophos XG Firewall now includes lateral movement protection. This prevents targeted, manual cyberattacks or exploits from infiltrating further into a compromised network.
“Many organizations are set up to protect against automatic bots, but not interactive, human-driven attacks. If active adversaries get into a system they can ‘think laterally’ to troubleshoot roadblocks, evade detection and move around. It’s hard to stop them unless the right security measures are in place, most lateral movements happen on the endpoint, which is why synchronizing security is important. Attackers will attempt to advance using non-malware techniques, such as exploits, Mimikatz and privilege escalation. The network needs to know to respond and automatically shut down or isolate infected machines before anyone or anything spreads further” said Dan Schiappa, senior vice president and general manager of products at Sophos.
The Sophos XG Firewall automatically interacts with Sophos’ endpoint products, including its new Intercept X Advanced with Endpoint Detection and Response, to deliver this new layer of protection. This creates an intelligent solution to proactively predict and protect against threats, detect and prevent infection by automatically isolating machines, and remediate the infection.
“Stopping lateral movements – from active adversaries or worm-type exploits – by sharing intelligence between the firewall and endpoints and automatically isolating infected systems is critical for every organization today,” said Schiappa.
Features of Sophos XG Firewall:
- Protection Enhancements
- Deeper, broader IPS coverage with increased granularity in patterns
- JavaScript cryptojacking protection
- Sandstorm Sandboxing Enhancements
-
- Intercept X integration to identify zero-day threats before they enter the network
- Deep behavioural, network and memory analysis with machine learning, CryptoGuard, and exploit detection
- Networking Enhancements
- New Sophos Connect IPSec VPN client with support for Synchronized Security
- Education Features
- Chromebook client authentication support for user-based policy and reporting
- User/group policy support for SafeSearch and YouTube restrictions
Availability
Sophos XG Firewall is available from registered Sophos partners worldwide.
