Firewall Xstream power for SMEs and Enterprise

SophosNews

Share post

More protection for SMBs and Enterprises with the Xstream architecture. The new Sophos Firewall comes with performance improvements, dynamic traffic routing and SD-WAN capabilities, and integrations with Microsoft Azure Active Directory.

Sophos introduces the new capabilities of the Sophos Firewall. The latest version is optimized for the complex and demanding requirements of distributed enterprise edge computing while also providing practical extensions for SMBs. These include, in particular, performance improvements when checking encrypted data traffic, dynamic traffic routing for Internet Protocol Version 6 (IPv6), additional reliability with software-defined wide area network (SD-WAN) load balancing and seamless integration with Microsoft Azure Active Directory .

Sophos Firewall with Xstream architecture

The Sophos Firewall is built on the Xstream architecture and Flow processors. One of the most important advantages is that these are programmable. While other firewalls slow down over time, Sophos can improve performance even as new features and functionality are added. The design protects customers' investment in Sophos Firewall and enables a seamless transition to a cloud-enabled world. SD-WAN and Secure Access Service Edge (SASE) require an efficient platform that is not only resilient but also makes day-to-day management easier and faster.

🔎 Sophos Firewall with Xstream architecture and Flow processors (Image: Sophos).

Protection for modern IT infrastructures with even more performance

Wie der Sophos Threat Report 2023 shows, effective and reliable inspection of network traffic is critical to protecting against threats. Distributed offices, remote workers, cloud workloads, custom legacy apps, and a growing reliance on global software-as-a-service providers are making IT infrastructure increasingly complex and presenting network security managers with headaches of configuration and deployment risk management.

Sophos Firewall now provides the performance, protection and resiliency that businesses with a distributed infrastructure need, while simplifying the management of complex networks:

  • Advanced performance and protection: A new high-performance dynamic routing engine and Xstream Transport Layer Security (TLS) FastPath acceleration improve the inspection of encrypted traffic. This also provides more headroom for traffic that requires deep packet inspection. The asymmetric, cryptographic capabilities of the Xstream Flow processors - included in every XGS Series appliance - enable TLS inspection even in the most demanding networks.
  • Additional failsafety: New SD-WAN load balancing ensures performance and reliability in the event of an Internet Service Provider (ISP) outage. It also offers improvements in high-availability clusters and ensures maximum business continuity and uptime for mission-critical networks.
  • Improved ease of management: Managing network security is easier than ever with new Microsoft Azure Active Directory integration for seamless single sign-on for administrators and new host and service object lookup.

Integration with Zero Trust Network Access

Sophos Firewall is integrated with Sophos ZTNA (Zero Trust Network Access) under a unified management layer. This makes it an important pillar of Sophos' SASE strategy, which offers a simple, scalable and, above all, secure solution compared to conventional virtual private networks (VPN) with remote access. The network solution is also part of the Sophos Adaptive Cybersecurity Ecosystem, which integrates the entire Sophos portfolio of products and services as well as Sophos X-Ops threat intelligence for faster, contextual and synchronized detection, prevention and response.

The Sophos Firewall is managed via the loud-native Sophos Central platform along with all other solutions. Administrators and Managed Service Providers (MSPs) or Sophos Managed Detection and Response (MDR) users can use the central and intuitive interface to monitor installations, receive alarms, respond to them and have an overview of all licenses and upcoming renewal dates.

More at Sophos.com

 


About Sophos

More than 100 million users in 150 countries trust Sophos. We offer the best protection against complex IT threats and data loss. Our comprehensive security solutions are easy to deploy, use and manage. They offer the lowest total cost of ownership in the industry. Sophos offers award-winning encryption solutions, security solutions for endpoints, networks, mobile devices, email and the web. In addition, there is support from SophosLabs, our worldwide network of our own analysis centers. The Sophos headquarters are in Boston, USA and Oxford, UK.


 

Matching articles on the topic

Report: 40 percent more phishing worldwide

The current spam and phishing report from Kaspersky for 2023 speaks for itself: users in Germany are after ➡ Read more

BSI sets minimum standards for web browsers

The BSI has revised the minimum standard for web browsers for administration and published version 3.0. You can remember that ➡ Read more

Stealth malware targets European companies

Hackers are attacking many companies across Europe with stealth malware. ESET researchers have reported a dramatic increase in so-called AceCryptor attacks via ➡ Read more

IT security: Basis for LockBit 4.0 defused

Trend Micro, working with the UK's National Crime Agency (NCA), analyzed the unpublished version that was in development ➡ Read more

MDR and XDR via Google Workspace

Whether in a cafe, airport terminal or home office – employees work in many places. However, this development also brings challenges ➡ Read more

Test: Security software for endpoints and individual PCs

The latest test results from the AV-TEST laboratory show very good performance of 16 established protection solutions for Windows ➡ Read more

FBI: Internet Crime Report counts $12,5 billion in damage 

The FBI's Internet Crime Complaint Center (IC3) has released its 2023 Internet Crime Report, which includes information from over 880.000 ➡ Read more

HeadCrab 2.0 discovered

The HeadCrab campaign against Redis servers, which has been active since 2021, continues to successfully infect targets with the new version. The criminals' mini-blog ➡ Read more