Sophos Launches Industry’s Only XDR Solution that Synchronizes Native Endpoint, Server, Firewall, and Email Security
Sophos today announced Sophos XDR, the industry’s only extended detection and response (XDR) solution that synchronizes native endpoint, server, firewall, and email security. With this comprehensive and integrated approach, Sophos XDR provides a holistic view of an organization’s environment with the richest data set and deep analysis for threat detection, investigation and response.
“We’re seeing an extraordinarily high level of complex ransomware and other cybercrime, and the need for effective, comprehensive cybersecurity has never been more critical or urgent,” said Dan Schiappa, chief product officer at Sophos.
“Sophos XDR is a game-changing new solution for proactively defending against the most sophisticated and evasive attacks, especially those that leverage multiple access points to gain entry, move laterally to evade detection, and do as much damage as possible as fast as possible,” Dan added.
Sophos XDR extends visibility across Sophos’ next-generation portfolio of solutions for an in-depth picture of threats. At the heart of Sophos XDR is the industry’s richest data set. Sophos XDR offers two types of data retention, including up to 90 days of on-device data, plus 30 days of cross-product data in the cloud-based data lake. The unique approach of blending on-device and data lake forensics provides the broadest and most in-depth contextualized insights that can be leveraged by security analysts through Sophos Central and via open application programming interfaces (APIs) for ingestion into security information and event management (SIEM); security orchestration, automation and response (SOAR); professional service automation (PSA); and remote monitoring and management (RMM) systems.
The endpoint security leader also today also published new research, “Intervention halts a ProxyLogon-enabled attack,” detailing an attack against a large organization that began when the adversaries compromised an Exchange server using the recent ProxyLogon exploit.
Additionally, Sophos also released a new version of its industry-best endpoint detection and response – Sophos EDR. New scheduled queries and customizable contextual pivoting capabilities make it faster and easier than ever for security analysts and IT administrators to identify, investigate and respond to security issues with speed and precision. Users further benefit with new pre-configured queries and powerful threat intelligence through integration with SophosLabs Intelix. Sophos EDR customers can access seven days of cloud hosted data (upgradable to 30 days) in the data lake, in addition to 90 days of on-device data.
Sophos XDR and EDR are part of the Sophos adaptive cybersecurity ecosystem (ACE), a new open security architecture that optimizes threat prevention, detection and response. The new products will be available worldwide on May 19 through Sophos partners.
