An Introduction to Sophos Central Sophos Central Endpoint and Server Protection Version: 4.0v1 [Additional Information] Sophos Central Endpoint and Server Protection CE0505: An Introduction to Sophos Central December 2022 Version: 4.0v1 © 2022 Sophos Limited. All rights reserved. No part of this document may be used or reproduced in any form or by any means without the prior written consent of Sophos. Sophos and the Sophos logo are registered trademarks of Sophos Limited. Other names, logos and marks mentioned in this document may be the trademarks or registered trademarks of Sophos Limited or their respective owners. While reasonable care has been taken in the preparation of this document, Sophos makes no warranties, conditions or representations (whether express or implied) as to its completeness or accuracy. This document is subject to change at any time without notice. Sophos Limited is a company registered in England number 2096520, whose registered office is at The Pentagon, Abingdon Science Park, Abingdon, Oxfordshire, OX14 3YP. An Introduction to Sophos Central - 1 An Introduction to Sophos Central In this chapter you will learn what Sophos Central is and the protection it offers. RECOMMENDED KNOWLEDGE AND EXPERIENCE ✓ There are no pre-requisites for this chapter DURATION 5 minutes In this chapter you will learn what Sophos Central is and the protection it offers. An Introduction to Sophos Central - 2 What is Sophos Central? A unified cloud-based console used to manage Sophos Central products Provides world leading protection Reduces complexity of managing multiple protection solutions Use of anti-ransomware and anti-exploit technology Leverages Synchronized Security to simplify threat investigation and remediation Backed by SophosLabs Synchronized Security Sophos Central is a unified cloud-based console that is used to manage Sophos Central products providing world leading protection to keep you, your data, and your organization safe. Sophos Central reduces the complexity of managing multiple protection solutions that are typically managed through multiple consoles. It uses anti-ransomware and anti-exploit technology that stops advanced threats and leverages Synchronized Security to simplify threat investigation and remediation which minimizes the impact of threats. All Sophos protection is backed up by SophosLabs, our global network of threat experts who ensure that you always have the best possible protection. An Introduction to Sophos Central - 3 Web-Based Platform Sophos Central is a web-based platform enabling the control and management of all Sophos products from anywhere, at any time. It is automatically updated so that the latest protection is always provided. An Introduction to Sophos Central - 4 Supported Browsers Additional information in the notes Google Chrome Apple Safari (Mac only) Mozilla FireFox Microsoft Edge As Sophos Central is web-based, we recommend that you are using a supported web browser. Sophos Central supports both the latest and previous versions of all major Internet browsers. If an unsupported web browser is detected, you will be redirected to a page that lists the currently supported browsers so that you can upgrade. [Additional Information] You can view a list of currently supported web browsers here: https://docs.sophos.com/central/enterprise/help/en-us/SupportedBrowsers/index.html An Introduction to Sophos Central - 5 Additional information in the notes Sophos Security Framework ▪ ▪ ▪ ▪ ▪ ▪ ▪ Physical security Network security Data security Threat protection Compliance and external audits Customer controls Telemetry and data gathering The Sophos Central security framework document provides a detailed look at Sophos Central. It covers deployment, development, and maintenance. Additionally, it provides links to information pages providing full details on the data Sophos gathers and stores. It also details the various measures Sophos takes to provide this secure platform. [Additional Information] The security framework document can be found at https://docs.sophos.com/central/Framework/security-framework/index.html An Introduction to Sophos Central - 6 Sophos Central Portals Sophos ID Self Service Portal ▪ Single Sign-On (SSO) mechanism ▪ MFA required for admins ▪ Allows users to customize security status and notifications To access Sophos Central, you will require a Sophos ID. This ID is a single sign-on (SSO) mechanism. Your Sophos ID gives you access to the Sophos Central dashboard as well as other Sophos resources depending on your license. Sophos Central administrators must use multi-factor authentication to login. The self-service portal (SSP) is available to all users. This allows users to customize their security status and notifications directly. The SSP allows users to enrol devices themselves and provides a console to view quarantined items, and manage device encryption, giving them greater control over their security and data. Once a user has configured their password, they are able to login to the self-service portal. It is important to note that the self-service portal is only available to users once it has been configured in Sophos Central by an administrator. An Introduction to Sophos Central - 7 Sophos Central Interfaces Sophos Central Admin Dashboard Enterprise Dashboard (EDB) Enables IT managers to deploy and manage all their security through a single interface Allows Enterprises to manage large, distributed estates There are two levels of access to Sophos Central. Sophos Central Admin Dashboard. This is the administrator interface which is designed to help administrators deploy, manage, and secure an entire organization in one place. This is where an administrator can view multiple products, action alerts, and hunt for possible threats. A summary of the entire estate is displayed on the dashboard providing an overview of security. The Enterprise Dashboard (EDB). This interface allows administrators to manage the security of large distributed organizations with multiple branches. Sub-estates can be configured with security rules applied to specific sub-estates. Licenses can be shared between sub-estates from one master pool of licenses. An Introduction to Sophos Central - 8 Sophos Adaptive Cybersecurity Ecosystem Sophos Endpoint r Sophos Server Protection It is useful to understand the Sophos Adaptive Cybersecurity Ecosystem, which is shown here. This course will focus on the Sophos Endpoint and Server Protection available in Sophos Central. An Introduction to Sophos Central - 9 Knowledge Check Take a moment to check your knowledge! An Introduction to Sophos Central - 10 Question 1 of 2 This course will focus on which Sophos Central products? Sophos Endpoint Sophos Firewall Email Protection Network Protection Server Protection An Introduction to Sophos Central - 11 Question 2 of 2 True or False: In a large distributed organization, specific security rules can be applied to sub-estates. True False An Introduction to Sophos Central - 13 Chapter Review Sophos Central is a unified cloud-based console that is used to manage Sophos Central products. Sophos Central protection uses anti-ransomware and anti-exploit technology that stops advanced threats and leverages Synchronized Security to simplify threat investigation and remediation which minimizes the impact of threats. The self-service portal (SSP) is available to all users, it allows users to respond to notifications directly, view quarantined items and protect devices. Here are the three main things you learned in this chapter. Sophos Central is a unified cloud-based console that is used to manage Sophos Central products. Sophos Central protection uses anti-ransomware and anti-exploit technology that stops advanced threats and leverages Synchronized Security to simplify threat investigation and remediation which minimizes the impact of threats. The self-service portal is available to all users, it allows users to respond to notifications directly, view quarantined items, and protect devices. An Introduction to Sophos Central - 15 An Introduction to Sophos Central - 16