We’re excited to begin the early entry program (EAP) for Sophos DNS Safety for networks. This new cloud-based service is a part of our rising suite of Safe Entry Service Edge services and products, increasing upon what we began with Sophos ZTNA and Sophos SD-WAN Orchestration.

Enhanced web and net safety

Sophos DNS Safety provides one other layer of safety to each community. It really works to immediately block entry to unsafe and undesirable domains throughout all ports, protocols, and functions on the earliest alternative – from each managed and unmanaged gadgets.

DNS Safety completely enhances and augments your current community safety and coverage enforcement instruments – from Sophos or some other vendor. DNS Safety may be deployed in a couple of minutes: it’s by no means been simpler to roll out further safety to your group.

Sophos DNS Safety is a globally accessible area identify decision service with built-in coverage controls and reporting in Sophos Central. It’s backed by SophosLabs’ real-time risk intelligence, defending your group from malicious area exercise and permitting you to enact coverage for area classes or area lists.

Through the use of Sophos DNS Safety instead of your current public DNS resolver, you possibly can forestall any gadgets in your community from accessing domains related to safety threats and different undesirable web sites managed via coverage.

DNS Safety enhances the safety supplied by the opposite safety features of Sophos Firewall. Deploying it on a community protected by Sophos Firewall gives a further layer of safety that ensures all protocols and ports are protected in opposition to accessing dangerous or inappropriate domains.

Built-in reporting

Sophos DNS Safety gives in-depth visibility into the domains visited out of your community, with complete dashboarding and reporting.

Safety for networks

On this preliminary launch, coverage choice and entry to the DNS Resolver are based mostly on the originating public IPv4 handle of the DNS queries. Therefore, defending particular person gadgets that transfer from community to community (or web site to web site) is inappropriate. Dynamic IP addresses are supported when used with a dynamic DNS supplier.

As we develop our Safety Service Edge providers, we plan to combine with the endpoint, offering DNS safety and different network-oriented safety providers for roaming gadgets, wherever they’re.

Cross-product integration

As well as, Sophos DNS Safety’s log information and intelligence are shared with Sophos Information Lake for Sophos XDR and MDR threat-hunting analysts to assist detect energetic adversaries and threats working on the community. Please search for further updates on the XDR integration because the EAP progresses.

Included at no further cost for Sophos Firewall clients with Xstream Safety

The preliminary launch of DNS Safety is being added to our Xstream Safety bundle, offering further worth to this already superb suite of safety options for our current Sophos Firewall clients.

Getting began

Getting began with Sophos DNS Safety is straightforward. Replace your current DNS configuration by pointing your gadgets or native DNS servers to our international anycast IP addresses, inform us about your areas in your Sophos Central account by coming into your networks’ public IPv4 handle(es), after which present your suggestions.

To get began, full this registration type. When you’ve finished that, we’ll e mail you with our Getting Began information and all the knowledge you should rise up and operating.

After that, please drop by the Group Discussion board to share your expertise with different individuals or inform us about your experiences via the in-product suggestions hyperlink.

*Please observe that the preliminary factors of presence for the EAP service are in North America, Europe, and India. Individuals in different geographies could not expertise the most effective question latency. Please monitor your community expertise if you’re exterior these areas. We are going to develop protection for extra areas sooner or later.

*Early entry is anticipated to run via January 2024, so get began at the moment and assist us make this service the most effective it may be.