What's new in Sophos Central

We regularly update Sophos Central with improvements or new features. You can see the details here.

!! Attention, immediate action recommended !!

"Wanna" ransomware outbreak, for information about how to protect your organization read the knowledgebase article 126733.

May 17, 2017

Intercept X CryptoGuard Disk and Boot Enhancements

Intercept X CryptoGuard technology protects you from ransomware that encrypts your data.  Now we are adding boot record and disk wipe protection to further defend your computer against tampering.

April 26, 2017

Sophos Central Admin UI updates

We've now completed the rollout of the new Single Product Experience and Policy UI updates for Sophos Central Admin accounts. The look and feel isn’t drastically different from what you're used to, but we’ve aimed to more clearly define individual products while keeping common features accessible from the main dashboard. Read More

March 29, 2017

Data Sharing

Live Protection data may be sent to Sophos engineers for analysis (see our Privacy Policy). The engineers may be outside your storage region. You can opt in or out in your Threat Protection policies.

If you have Intercept X, Root Cause Analysis (RCA) data may be sent to Sophos for analysis from Friday, April 7, 2017. To stop this, opt out in Account Details > Account Preferences. The option to send RCA ‘snapshot’ samples is now only available if you contact Technical Support for help.

Sophos strongly recommends that you use these features. They help us improve your protection.

March 15, 2017

Device Encryption now also for macOS FileVault

Sophos Central Device Encryption now also lets you manage full disk encryption on Macs. Supporting both Windows BitLocker and macOS FileVault, Sophos Central Device Encryption is the easiest way to centrally manage full disk encryption across all your computers. Read More

March 2, 2017

Data Sharing

Live Protection data may be sent to Sophos engineers for analysis (see our Privacy Policy). The engineers may be outside your storage region. You can opt in or out in your Threat Protection policies.

If you have Intercept X, Root Cause Analysis (RCA) data may be sent to Sophos for analysis from Friday, April 7, 2017. To stop this, opt out in Account Details > Account Preferences. The option to send RCA ‘snapshot’ samples is now only available if you contact Technical Support for help.

Sophos strongly recommends that you use these features. They help us improve your protection.

CryptoGuard for servers 

CryptoGuard now stops ransomware from encrypting data on Windows servers, including network shares. It can protect against ransomware running locally or remotely. You'll need a Server Protection Advanced license. Read More

Sophos for Virtual Environments

Our new virtualization security solution is now available and included in all Server Protection licenses. Sophos for Virtual Environments provides off-box threat protection to reduce overhead on your VMs, for both VMware ESXi and Microsoft Hyper-V platforms. Read More

February 14, 2017

Data Loss Prevention

Data Loss Prevention (DLP) reduces the risk that users will transfer data accidentally. With DLP, you can monitor and block the transfer of files that might contain sensitive data, such as email addresses or credit card numbers. Read more

Scheduled updates

An Updating policy lets you choose when product updates become available on your network. This ensures that your computers don’t start updating until a time that suits you.

Policies per computer

You can now apply certain policies to computers or computer groups, regardless of who is logged on.  You’ll see this option when you create a policy at the User and Computer policies page.

Desktop messaging

You can now customize the messages that end users see when Sophos Central blocks threats or warns users about risks. You configure messages for each policy.

AWS integration enhancements

You can connect your Amazon Web Services accounts with Sophos Central. This gives improved visibility and management of Server Protection on your AWS EC2 instances: you'll be able to apply policies to AWS Auto Scaling groups, and Sophos Central will remove terminated EC2 instances from the console automatically. And now you can see EC2 instances that don’t yet have Sophos protection too. Read more

Sophos Security Heartbeat for servers

Windows servers are now part of Sophos Synchronized Security. The Security Heartbeat feature sends server health reports to XG Firewall, which can identify compromised servers and prevent endpoints from accessing them. Read more

January 25, 2017

Introducing Sophos Phish Threat: Train your users to spot phishing attacks

The weakest link in a company's cyber-defenses? People! Sophos Phish Threat teaches end users to spot phony phishing messages with a series of simulated attack emails and easy-to-deploy training campaigns. Customers in the North American data center can start a trial right now: just look in the Explore Products section. European data center customers can start in February. Read more

January 11, 2017

Wireless stability improvements

Good news! We've drastically improved the stability of our wireless offering to address various issues with roaming, packet loss, and disconnects. Read more

December 12, 2016

CryptoGuard ransomware protection is now available for Macs

You can now protect your documents, photos, and other data from Mac ransomware. Enroll your account in the Early Access Program to use this feature. Read more

Server Protection now integrates with Amazon Web Services

You can now connect your Amazon Web Services accounts with Sophos Central. This gives improved visibility and management of Server Protection on your AWS EC2 instances: you'll be able to apply policies to AWS Auto Scaling groups, and Sophos Central will remove terminated EC2 instances from the console automatically. Read more

Support for Windows XP and Server 2003 ending: act now

Sophos Endpoint Protection for Windows XP and Server 2003 will be retired soon. Speak to your account manager if you need extended support. Read more

December 2, 2016

Get more out of your wireless with band steering and hotspot vouchers

With band steering you ensure that every wireless client uses the best suitable band, bringing better performance to everyone. Additionally, you can limit usage of your hotspot by handing out vouchers, limiting the time a hotspot is used by your customers. Read more

Support for Windows XP and Server 2003 ending: act now

Sophos Endpoint Protection for Windows XP and Server 2003 will be retired soon. Speak to your account manager if you need extended support. Read more

November 22, 2016

Great news! Application Control is now available for Macs

You can now control which applications can be run on Macs in the same way that you can for Windows computers. Starting with version 9.6 of Sophos Anti-Virus, your Macs will use the settings in their current Application Control policy. Read more

New to Sophos Wireless: daily hotspot passwords and more

We've got some great new Wireless updates for you. You can now set daily passwords for your hotspots, set up isolated guest networks without changes to your installation, and the new Airtime Fairness feature ensures that every wireless client gets the same bandwidth. Read more

Support for Windows XP and Server 2003 is ending: act now

Sophos Endpoint Protection for Windows XP and Server 2003 will be retired soon. Speak to your account manager if you need extended support. Read more

October 26, 2016

Seamlessly start trials inside Sophos Central Admin

Taking Sophos for a spin just got easier! You can now seamlessly start 30-day trials for individual products yourself in the Explore Products section. Read about available products, watch videos, start your trials, and contact your partner to purchase, all from the same page. Read more

Support for corporate security tools (SIEM integration)

Security information and event management (SIEM) integration has been added to Sophos Central Admin. Whether you use Splunk, ArcSight, or any number of solutions, you'll find data easy to ingest thanks to Common Event Format output. Read more

Support for Windows XP and Server 2003 is ending: act now

Sophos Endpoint Protection for Windows XP and Server 2003 will be retired soon. Speak to your account manager if you need extended support. Read more

September 28, 2016

Better collaboration with audit logs and new role-based access control

This release allows for granular permission-level visibility into the existing audit log feature by way of role-based access control (RBAC) functionality. RBAC can be set up to meet the needs of your IT organization with pre-defined full-access, read-only, and help-desk roles. Read More

Minor UI changes for Firewalls and the Admin menu

We've streamlined the UI a bit: Firewall registration has now moved to the System Settings menu. And in the Admin menu, "Administration & Licensing" has been split into two pages: "Licensing" and "Account Details". Read More

Sophos Central Wireless adds exciting new features

This Wireless update packs a wallop! Enjoy fast roaming, dynamic VLAN, MAC-based access control and more than a dozen additional features and enhancements. Read More

September 22, 2016

Introducing Sophos Intercept X

Sophos Intercept X uses next-gen signatureless exploit prevention to protect endpoints against ransomware and advanced zero-day threats, and includes visual root cause analysis and deep forensic cleanup features. Read More

Device Encryption

Now you can protect your data in case computers are lost or stolen, and comply with regulatory requirements. Sophos Central Device encryption lets you manage full disk encryption using Windows BitLocker. If your users forget their PIN or password, they can call the Help Desk or use the Sophos Central self-service portal to access recovery keys.

September 8, 2016

Server Groups

Server Groups let you set policies on a group of servers rather than individually.

August 25, 2016

Sophos Intercept Beta

Sophos Intercept is a new offering for endpoints. It protects against ransomware and exploits that are used to infect devices. It also helps you investigate security breaches. You can install Sophos Intercept together with Sophos Endpoint, or, if you prefer, alongside other anti-malware products. See https://community.sophos.com/spectrum/.

Early Access Programs

EAP (Early Access Programs) is a new way to try out new features from Sophos. You can see all public Beta features and join the ones that interest you. EAP also includes invitation-only Betas, where we send you a code that gives you access. And, although we would be sad to see you go, you can also use EAP to leave a Beta. Take a look.

August 17, 2016

Email Security

Email Security is a secure email gateway you manage from Sophos Central. Features include:

  • Stops spam, phishing and malware.
  • Supports Office 365, Google Apps for Work, Exchange 2003 and later, and more.
  • Enables global blocking of addresses or domains.
  • Has a self-service portal where users can release quarantined email.

You need a Sophos Email license to use it. For more info see https://www.sophos.com/en-us/products/sophos-email.aspx

August 10, 2016

We’ve now made these features available for your Windows servers. All were already available for workstations.

MTD for servers

MTD (malicious traffic detection) detects network traffic that indicates that a "command and control" server may be trying to take control of your server. See https://community.sophos.com/kb/en-us/121607

Application control for servers

Application control lets you prevent users from running applications that are unsuitable for the office. See https://community.sophos.com/kb/en-us/63656

File reputation checking for servers

File reputation checking warns users if they’re about to download files with a low reputation (based on frequency of downloading and other factors). See https://community.sophos.com/kb/en-us/121319

July 27, 2016

MTD for Linux

We've added Malicious Traffic Detection (MTD) for Linux servers. MTD monitors network traffic for connections to known bad URLs such as command and control servers, which may be trying to take control of your server. Any malicious traffic can then be blocked and cleaned up. You need the Server Protection Advanced license to use this feature. More about MTD.

July 7, 2016

Sophos Wireless

Sophos Wireless provides a simple, effective way to set up and manage your wireless networks. You manage it from Sophos Central and can either use it on its own or as part of a portfolio of Sophos products. Features in this first release include:

  • A simple dashboard with all key information at a glance.
  • Basic usage visibility.
  • Basic site visualization tool with an option to upload your own floor plans.
  • Scheduled firmware upgrades.

Note: Sophos Wireless can be used with all current AP 15, 55 and 100 Access Point models running the latest firmware (indicated by a Sophos Central ready label on the reverse of the AP and on the packaging). Learn more

Audit Log

We’ve now added an Audit Log to Sophos Central. This report shows all actions taken by Sophos Central admins and will help IT teams audit admin activity. You can export up to a year’s reports as CSV or PDF. Currently, all admins can access the reports, but access will soon be controlled through admin privileges. Take a look

May 26, 2016

Update Cache enhancements

We’ve enhanced the Update Cache feature so that Windows Servers can update from a local cache. What’s more, the Sophos Central Admin console now lets you see which endpoints update from each cache. More about Update Cache

Web Control for Windows Servers

If you have Sophos Server Protection and appropriate licenses, you can now use Web Control on Windows Servers. This is useful if your end-users can browse the web from a Windows Server, because it lets you restrict access to potentially inappropriate websites. This feature is available in the Server Policy editor. More about Web Control

April 14, 2016

Welcome to the all-new Sophos Central Admin

Sophos Cloud is now Sophos Central! The new Sophos Central Admin console features a streamlined design, enhanced protection, simplified reporting, a robust dashboard and other enhancements. Sophos Central Admin is more powerful and easy to use than ever before.

Click here to watch a short video for more information.