This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

2FA Missing on Quarantine Website

We currently use SEA on-premise and restrict the quarantine site to local IPs. I tested the cloud version, but it does not have 2FA on the quarantine site. SSO does not count as 2FA. Both our government regulatory and cyber insurance company have said we cannot use the cloud version since 2FA is not implemented on the quarantine site. Does Sophos plan to put 2FA on the quarantine site? From a security perspective, I am surprised this is not in place. Also restricting login by IP would be great too.

Thank you,

John

This thread was automatically locked due to age.

Top Replies

emmosophos over 1 year ago in reply to LRSpartan +2 verified

Hello, PM mentioned that 2FA for the Self-Service Portal is coming in Q4 this year, as it’s currently under development. Regards,

0 Tom Foucha over 1 year ago in reply to LRSpartan

Sounds like debates I had 7-10+ years ago lol...even the US Govt is moving to the cloud, GovCloud and other FedRAMP services. As for CyberInsurance we work with some Insurance companies. I wouldn't say being on premise prevents the business from being hacked and sure you wouldn't either. Mailbox compromise doesn't care where the server sits, cloud, premise. I've run corporate systems onsite and in the cloud and while companies may bring some services back in house they cannot sustain inhouse for all services, well unless they are not doing payroll, insurance, 401k, travel, salesforce etc.... thanks for the discussion...
Cancel
Vote Up 0 Vote Down

Cancel
0 LRSpartan over 1 year ago in reply to Tom Foucha

We know we can be hacked on-site, but it is about a trade off of risk. Ultimately, we do what our clients want and our cyber security insurance policy prices the cloud out.

Thank you for your comments too.
Cancel
Vote Up 0 Vote Down

Cancel
0 LRSpartan over 1 year ago in reply to Tom Foucha

Good morning Tom,

Do you know if this is still on schedule?

Thank you,

John
Cancel
Vote Up 0 Vote Down

Cancel
0 Tom Foucha over 1 year ago in reply to LRSpartan

Last I spoke with the Central Product Management team (2 weeks ago) it was on schedule for Q4 of this year. If I hear otherwise I will post.
Cancel
Vote Up 0 Vote Down

Cancel
0 LRSpartan over 1 year ago in reply to Tom Foucha

Thank you.
Cancel
Vote Up 0 Vote Down

Cancel
0 LRSpartan over 1 year ago in reply to Tom Foucha

Tom,

Do you know if this feature (2fa) is still on track for this quarter?

Thank you,

John
Cancel
Vote Up 0 Vote Down

Cancel
0 Tom Foucha over 1 year ago in reply to LRSpartan

i still see it listed as this quarter and have not heard anything saying otherwise.
Cancel
Vote Up 0 Vote Down

Cancel
0 LRSpartan 11 months ago in reply to emmosophos

Hi Emmanuel,

Is 2FA on the email quarantine site available yet? Thank you!
Cancel
Vote Up 0 Vote Down

Cancel
0 Tom Foucha 11 months ago in reply to LRSpartan

PM told me this morning early January as we are entering the network freeze change window so they weren't able to get it in. I'm keeping an eye on it for you.
Cancel
Vote Up 0 Vote Down

Cancel
0 LRSpartan 11 months ago in reply to Tom Foucha

Thank you Tom. I appreciate your help.
Cancel
Vote Up 0 Vote Down

Cancel