The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article describes the components that make up Endpoint Security and Control, and the related services which it uses. Some of these are located on the server, some on the endpoint computers, and some on both.
Certain components are not available for older console versions (version 4.x) and will require you to upgrade your management server and your license to use them.
The following sections are covered:
Applies to the following Sophos products Sophos Endpoint Security and Control
The following components are located on one or more servers.
The following components are located on the endpoint computers (clients/ workstations). You can also install some of these components on the server.
Application Control enables you to block certain legitimate consumer applications from running on workplace computers.
Part of the SAV component
Allows you to manage the use of storage devices and network interfaces connected to all endpoints computers. See, Overview of Sophos device control in Endpoint Security and Control.
You can configure Data Control to monitor file types, names, or content when a user is copying (transferring) or uploading files to another computer or device.
Part of the SAV component.
A number of services are used on both the server and on endpoint computers. The following lists the services, together with the filename (process name) of each and their dependencies.
The following services run on the server.
NOTE: Additional Sophos services are shown on your server if you have chosen to install endpoint components. See the endpoint section for further details.
The following services run on the endpoint computer.
Gathers and records information from other Sophos components on the system and can lookup information from Sophos cloud services. The information gathered from multiple sources is used intelligently to improve detection of malicious files, processes, and traffic.
When a Sophos Firewall is registered with Sophos Central, your computers can send regular reports on their security status or health to the firewall. These reports are known as Security Heartbeats.
The availability of components is controlled with your Sophos Update Manager subscription. In turn available subscriptions are controlled by your Sophos license. If you would like further information, trial a product, or upgrade your license, click here.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.