New to SafeGuard - customers needing protect project files

Question

Hi, 
 we have two scenarios to get more information on how to correctly address: 
 
 Scenario A 
 ####### 
 Small network environment with Windows Server 2012, with 20 users aproximatelly, where 04 guys are located on the "Project" department using CAM softwares (AutoDesk Powermill, McNeel Rhinoceros and VERO UK LTD - Machine Strategist), all computers is already using 'Central Endpoint Protection' to control USB pendrives. 
 
 Scenario B 
 ####### 
 03 people using Office 365 environment for emails, files on the 'OneDrive', still no sophos endpoint installed and they use Adobe softwares (Lightroom, Premier, Photoshop).

>>> What would be the best sophos product to protect them to avoid unwanted copy of protected content? 
 
 --- 
 SOPHOS HAS TOO MANY PRODUCTS ON THE ENCRYPTION FIELD 
 &bull; Central Device Encryption &bull; Enduser Protection and Encryption &bull; Enduser Protection and Encryption Enterprise &bull; Mobile Advanced and Encryption Enterprise (previously SMC Advanced and ncryption Enterprise) &bull; SafeGuard Data Exchange &bull; SafeGuard Device Encryption &bull; SafeGuard Disk Encryption Advanced &bull; SafeGuard Easy &bull; SafeGuard Encryption for Cloud Storage &bull; SafeGuard Encryption for File Shares &bull; SafeGuard Enterprise Encryption &bull; SafeGuard File ncryption &bull; SafeGuard File Encryption Advanced &bull; SafeGuard File Encryption for Mac &bull; SafeGuard File Encryption Standard &bull; SafeGuard Middleware &bull; SafeGuard Native Device Encryption &bull; Smartcards in Encryption / AET &bull; Smartcards in Encryption / Charismathics &bull; Smartcards in Encryption / Generic

Jasmin · Accepted Answer

Hi Renato Pereira 
 Safeguard Encryption software or Central device encryption are not for the servers. They can only deploy to the Client machines. 
 If you want to restrict users from copying the protected content from machines, you can set up a DLP policy in the Endpoint protection and in the server protection for servers as well. 
 Please refer to this document for Sophos DLP policy which comes under Endpoint and Server protection. 
 Safeguard Encryption software can encrypt the file on the client machines and those files can only be accessible or usable if employees are opening those files on the company laptops or desktops as the keys through which those files have been encrypted can only be available with company machines. 
 To have more information and related information on which product is more useful for you, you can contact Sophos partners as well. Please find this link on how you can locate nearest Sophos Partner.