What's new in Sophos Central

We regularly update Sophos Central with improvements or new features. You can see the details here.

October 23, 2017

Deep learning

We've updated the Intercept X Early Access Program to include malicious file detection powered by deep learning. Computers that you've already enrolled in the program get the new feature automatically. Read More

Important information for Device Encryption users

Here’s what you need to know about the recently discovered vulnerability in Infineon TPM devices, which affects RSA public encryption keys. Read more

CryptoGuard for macOS: early access ending

The CryptoGuard for macOS Early Access Program (EAP) ends soon. To continue using CryptoGuard, move endpoints to the Intercept X for macOS EAP.

Device Encryption

Sophos Central Device Encryption can now manage FileVault full disk encryption on macOS 10.13 High Sierra clients.

October 10, 2017

Privacy information

We’ve updated our privacy policy to reflect the new features of Intercept X. The changes explain which data we collect for malware analysis and where we do that analysis. Your Sophos Central Admin data remains in your chosen data centre. Read more

Sophos Mobile 7.1

Sophos Mobile now offers an even better Enterprise Mobility Management solution with new support for container-only management, improved usability, management enhancements, and much more. Read more

Sophos Wireless

Sophos Wireless now makes your life much easier, with better throughput at load, a power-save mode, and an enhanced recovery method for robust connectivity between the AP and Sophos Central. Read more

CryptoGuard for macOS: early access ending

The CryptoGuard for macOS Early Access Program (EAP) ends soon. To continue using CryptoGuard, move endpoints to the Intercept X for macOS EAP.

September 26, 2017

Try Intercept X for macOS

You can now join the Early Access Program (EAP) for Intercept X for macOS. The EAP includes CryptoGuard, Root Cause Analysis, Malicious Traffic Detection, and a new endpoint UI. Read more

Better visibility for guest VMs

Sophos for Virtual Environments now shows connected guest VMs in Sophos Central and detects malware in memory.

Server Protection for Windows enhancements

We’ve added an option to launch Sophos Clean from a CryptoGuard alert in Sophos Central, plus Update Cache support for Server 2016. We’ve also updated the agent UI and provided a self-help tool. Read more

September 12, 2017

Sophos Email: Admin access to quarantined email

Manage quarantined messages your way. Administrators can now access quarantined end-user email and release or delete it. Read more

August 29, 2017

Create Sophos Central sub-estates with the Enterprise Dashboard

Perfect for distributed organizations with multiple branches, the Enterprise Dashboard lets you administer Sophos Central sub-estates and share licenses between them. Read more

Upcoming changes to UNIX and Linux platform support

We're making changes to the platforms supported by the Sophos Antivirus for Linux and UNIX offerings. The changes are designed to enable Sophos to provide the strongest protection for the most popular platforms. Read more

Access new Intercept X features before they launch 

The next version of Intercept X will prevent credential theft, protect against new exploits like EternalBlue and DoublePulsar (used in the WannaCry worm), and more. Join our Early Access Program to try it. Start here

August 17, 2017

Access new Intercept X features before they launch 

The next version of Intercept X will prevent credential theft, protect against new exploits like EternalBlue and DoublePulsar (used in the WannaCry worm), and more. Join our Early Access Program to try it. Start here

Upcoming changes to UNIX and Linux platform support

We're changing the Linux and UNIX platforms supported by Sophos Anti-Virus. The changes are designed to enable us to provide the strongest protection for the most popular platforms. Read more

July 11, 2017

Protect servers from ransomware

For ransomware protection on servers, remember to turn on CryptoGuard in your Threat Protection policies. It’s not on by default for servers.

Support for Windows Server 2016 Hyper-V

Sophos for Virtual Environments now supports Windows Server 2016 Hyper-V. Read more

July 7, 2017

Access new Intercept X features before they launch

The next version of Intercept X will prevent credential theft, protect against new exploits like EternalBlue and DoublePulsar (used in the WannaCry worm), and more. Join our Early Access Program to try it. Start here

Expanded Windows Server protection

We’ve added support for Remote Desktop Services and augmented Update Cache so that it can function as a Message Relay for Windows servers and endpoints.

Syncing devices and groups

If you use our AD Sync tool, you can now synchronize devices (computers and servers) and device groups as well as users. You can also create and nest device groups manually to allow flexible arrangement of devices.

Enhanced Reporting

You can now save, schedule, and email report links for most report types.

Upcoming changes to UNIX and Linux platform support

We're making changes to the platforms supported by the Sophos Antivirus for Linux and UNIX offerings. The changes are designed to enable Sophos to provide the strongest protection for the most popular platforms. Read more

 

May 31, 2017

Enhanced integration with AWS

Sophos Central can now use Amazon Web Services (AWS) IAM Roles to access your AWS administrative account and protect your AWS servers (EC2 instances). This gives you enhanced security. Read more

Security Heartbeat added for Linux servers

Linux servers are now part of Sophos Synchronized Security. The Security Heartbeat feature sends server health reports to XG Firewall, which can identify compromised servers and prevent endpoints from accessing them.

May 17, 2017

Intercept X CryptoGuard Disk and Boot Enhancements

Intercept X CryptoGuard technology protects you from ransomware that encrypts your data.  Now we are adding boot record and disk wipe protection to further defend your computer against tampering.

April 26, 2017

Sophos Central Admin UI updates

We've now completed the rollout of the new Single Product Experience and Policy UI updates for Sophos Central Admin accounts. The look and feel isn’t drastically different from what you're used to, but we’ve aimed to more clearly define individual products while keeping common features accessible from the main dashboard. Read More

March 29, 2017

Data Sharing

Live Protection data may be sent to Sophos engineers for analysis (see our Privacy Policy). The engineers may be outside your storage region. You can opt in or out in your Threat Protection policies.

If you have Intercept X, Root Cause Analysis (RCA) data may be sent to Sophos for analysis from Friday, April 7, 2017. To stop this, opt out in Account Details > Account Preferences. The option to send RCA ‘snapshot’ samples is now only available if you contact Technical Support for help.

Sophos strongly recommends that you use these features. They help us improve your protection.

March 15, 2017

Device Encryption now also for macOS FileVault

Sophos Central Device Encryption now also lets you manage full disk encryption on Macs. Supporting both Windows BitLocker and macOS FileVault, Sophos Central Device Encryption is the easiest way to centrally manage full disk encryption across all your computers. Read More

March 2, 2017

Data Sharing

Live Protection data may be sent to Sophos engineers for analysis (see our Privacy Policy). The engineers may be outside your storage region. You can opt in or out in your Threat Protection policies.

If you have Intercept X, Root Cause Analysis (RCA) data may be sent to Sophos for analysis from Friday, April 7, 2017. To stop this, opt out in Account Details > Account Preferences. The option to send RCA ‘snapshot’ samples is now only available if you contact Technical Support for help.

Sophos strongly recommends that you use these features. They help us improve your protection.

CryptoGuard for servers 

CryptoGuard now stops ransomware from encrypting data on Windows servers, including network shares. It can protect against ransomware running locally or remotely. You'll need a Server Protection Advanced license. Read More

Sophos for Virtual Environments

Our new virtualization security solution is now available and included in all Server Protection licenses. Sophos for Virtual Environments provides off-box threat protection to reduce overhead on your VMs, for both VMware ESXi and Microsoft Hyper-V platforms. Read More

February 14, 2017

Data Loss Prevention

Data Loss Prevention (DLP) reduces the risk that users will transfer data accidentally. With DLP, you can monitor and block the transfer of files that might contain sensitive data, such as email addresses or credit card numbers. Read more

Scheduled updates

An Updating policy lets you choose when product updates become available on your network. This ensures that your computers don’t start updating until a time that suits you.

Policies per computer

You can now apply certain policies to computers or computer groups, regardless of who is logged on.  You’ll see this option when you create a policy at the User and Computer policies page.

Desktop messaging

You can now customize the messages that end users see when Sophos Central blocks threats or warns users about risks. You configure messages for each policy.

AWS integration enhancements

You can connect your Amazon Web Services accounts with Sophos Central. This gives improved visibility and management of Server Protection on your AWS EC2 instances: you'll be able to apply policies to AWS Auto Scaling groups, and Sophos Central will remove terminated EC2 instances from the console automatically. And now you can see EC2 instances that don’t yet have Sophos protection too. Read more

Sophos Security Heartbeat for servers

Windows servers are now part of Sophos Synchronized Security. The Security Heartbeat feature sends server health reports to XG Firewall, which can identify compromised servers and prevent endpoints from accessing them. Read more

January 25, 2017

Introducing Sophos Phish Threat: Train your users to spot phishing attacks

The weakest link in a company's cyber-defenses? People! Sophos Phish Threat teaches end users to spot phony phishing messages with a series of simulated attack emails and easy-to-deploy training campaigns. Customers in the North American data center can start a trial right now: just look in the Explore Products section. European data center customers can start in February. Read more

January 11, 2017

Wireless stability improvements

Good news! We've drastically improved the stability of our wireless offering to address various issues with roaming, packet loss, and disconnects. Read more

December 12, 2016

CryptoGuard ransomware protection is now available for Macs

You can now protect your documents, photos, and other data from Mac ransomware. Enroll your account in the Early Access Program to use this feature. Read more

Server Protection now integrates with Amazon Web Services

You can now connect your Amazon Web Services accounts with Sophos Central. This gives improved visibility and management of Server Protection on your AWS EC2 instances: you'll be able to apply policies to AWS Auto Scaling groups, and Sophos Central will remove terminated EC2 instances from the console automatically. Read more

Support for Windows XP and Server 2003 ending: act now

Sophos Endpoint Protection for Windows XP and Server 2003 will be retired soon. Speak to your account manager if you need extended support. Read more

December 2, 2016

Get more out of your wireless with band steering and hotspot vouchers

With band steering you ensure that every wireless client uses the best suitable band, bringing better performance to everyone. Additionally, you can limit usage of your hotspot by handing out vouchers, limiting the time a hotspot is used by your customers. Read more

Support for Windows XP and Server 2003 ending: act now

Sophos Endpoint Protection for Windows XP and Server 2003 will be retired soon. Speak to your account manager if you need extended support. Read more

November 22, 2016

Great news! Application Control is now available for Macs

You can now control which applications can be run on Macs in the same way that you can for Windows computers. Starting with version 9.6 of Sophos Anti-Virus, your Macs will use the settings in their current Application Control policy. Read more

New to Sophos Wireless: daily hotspot passwords and more

We've got some great new Wireless updates for you. You can now set daily passwords for your hotspots, set up isolated guest networks without changes to your installation, and the new Airtime Fairness feature ensures that every wireless client gets the same bandwidth. Read more

Support for Windows XP and Server 2003 is ending: act now

Sophos Endpoint Protection for Windows XP and Server 2003 will be retired soon. Speak to your account manager if you need extended support. Read more

October 26, 2016

Seamlessly start trials inside Sophos Central Admin

Taking Sophos for a spin just got easier! You can now seamlessly start 30-day trials for individual products yourself in the Explore Products section. Read about available products, watch videos, start your trials, and contact your partner to purchase, all from the same page. Read more

Support for corporate security tools (SIEM integration)

Security information and event management (SIEM) integration has been added to Sophos Central Admin. Whether you use Splunk, ArcSight, or any number of solutions, you'll find data easy to ingest thanks to Common Event Format output. Read more

Support for Windows XP and Server 2003 is ending: act now

Sophos Endpoint Protection for Windows XP and Server 2003 will be retired soon. Speak to your account manager if you need extended support. Read more

September 28, 2016

Better collaboration with audit logs and new role-based access control

This release allows for granular permission-level visibility into the existing audit log feature by way of role-based access control (RBAC) functionality. RBAC can be set up to meet the needs of your IT organization with pre-defined full-access, read-only, and help-desk roles. Read More

Minor UI changes for Firewalls and the Admin menu

We've streamlined the UI a bit: Firewall registration has now moved to the System Settings menu. And in the Admin menu, "Administration & Licensing" has been split into two pages: "Licensing" and "Account Details". Read More

Sophos Central Wireless adds exciting new features

This Wireless update packs a wallop! Enjoy fast roaming, dynamic VLAN, MAC-based access control and more than a dozen additional features and enhancements. Read More

September 22, 2016

Introducing Sophos Intercept X

Sophos Intercept X uses next-gen signatureless exploit prevention to protect endpoints against ransomware and advanced zero-day threats, and includes visual root cause analysis and deep forensic cleanup features. Read More

Device Encryption

Now you can protect your data in case computers are lost or stolen, and comply with regulatory requirements. Sophos Central Device encryption lets you manage full disk encryption using Windows BitLocker. If your users forget their PIN or password, they can call the Help Desk or use the Sophos Central self-service portal to access recovery keys.

September 8, 2016

Server Groups

Server Groups let you set policies on a group of servers rather than individually.

August 25, 2016

Sophos Intercept Beta

Sophos Intercept is a new offering for endpoints. It protects against ransomware and exploits that are used to infect devices. It also helps you investigate security breaches. You can install Sophos Intercept together with Sophos Endpoint, or, if you prefer, alongside other anti-malware products. See https://community.sophos.com/spectrum/.

Early Access Programs

EAP (Early Access Programs) is a new way to try out new features from Sophos. You can see all public Beta features and join the ones that interest you. EAP also includes invitation-only Betas, where we send you a code that gives you access. And, although we would be sad to see you go, you can also use EAP to leave a Beta. Take a look.

August 17, 2016

Email Security

Email Security is a secure email gateway you manage from Sophos Central. Features include:

  • Stops spam, phishing and malware.
  • Supports Office 365, Google Apps for Work, Exchange 2003 and later, and more.
  • Enables global blocking of addresses or domains.
  • Has a self-service portal where users can release quarantined email.

You need a Sophos Email license to use it. For more info see https://www.sophos.com/en-us/products/sophos-email.aspx

August 10, 2016

We’ve now made these features available for your Windows servers. All were already available for workstations.

MTD for servers

MTD (malicious traffic detection) detects network traffic that indicates that a "command and control" server may be trying to take control of your server. See https://community.sophos.com/kb/en-us/121607

Application control for servers

Application control lets you prevent users from running applications that are unsuitable for the office. See https://community.sophos.com/kb/en-us/63656

File reputation checking for servers

File reputation checking warns users if they’re about to download files with a low reputation (based on frequency of downloading and other factors). See https://community.sophos.com/kb/en-us/121319

July 27, 2016

MTD for Linux

We've added Malicious Traffic Detection (MTD) for Linux servers. MTD monitors network traffic for connections to known bad URLs such as command and control servers, which may be trying to take control of your server. Any malicious traffic can then be blocked and cleaned up. You need the Server Protection Advanced license to use this feature. More about MTD.

July 7, 2016

Sophos Wireless

Sophos Wireless provides a simple, effective way to set up and manage your wireless networks. You manage it from Sophos Central and can either use it on its own or as part of a portfolio of Sophos products. Features in this first release include:

  • A simple dashboard with all key information at a glance.
  • Basic usage visibility.
  • Basic site visualization tool with an option to upload your own floor plans.
  • Scheduled firmware upgrades.

Note: Sophos Wireless can be used with all current AP 15, 55 and 100 Access Point models running the latest firmware (indicated by a Sophos Central ready label on the reverse of the AP and on the packaging). Learn more

Audit Log

We’ve now added an Audit Log to Sophos Central. This report shows all actions taken by Sophos Central admins and will help IT teams audit admin activity. You can export up to a year’s reports as CSV or PDF. Currently, all admins can access the reports, but access will soon be controlled through admin privileges. Take a look

May 26, 2016

Update Cache enhancements

We’ve enhanced the Update Cache feature so that Windows Servers can update from a local cache. What’s more, the Sophos Central Admin console now lets you see which endpoints update from each cache. More about Update Cache

Web Control for Windows Servers

If you have Sophos Server Protection and appropriate licenses, you can now use Web Control on Windows Servers. This is useful if your end-users can browse the web from a Windows Server, because it lets you restrict access to potentially inappropriate websites. This feature is available in the Server Policy editor. More about Web Control

April 14, 2016

Welcome to the all-new Sophos Central Admin

Sophos Cloud is now Sophos Central! The new Sophos Central Admin console features a streamlined design, enhanced protection, simplified reporting, a robust dashboard and other enhancements. Sophos Central Admin is more powerful and easy to use than ever before.

Click here to watch a short video for more information.