Maximizing DLP using ONLY Sophos Firewall: Has anyone done it?

Question

Hey everyone, 
 I'm aiming to achieve the highest possible standard of Data Loss Prevention (DLP) using only the Sophos Firewall, without integrating any additional systems or solutions. 
 I don't have any specific requirements; my goal is simply to experiment and push the limits of what the Sophos Firewall can do in terms of DLP. Essentially, I'm looking to prevent data loss and confidentiality breaches solely at the firewall level, using every available feature, before considering things like endpoint protection. 
 By DLP, I&rsquo;m referring to scenarios like preventing classified Excel sheets from leaving the organization or restricting certain behaviors of USB drives, etc. 
 Has anyone tried this before? (If so, please share :) ) Or is it simply not feasible to implement a comprehensive solution without relying on specialized DLP systems/software? 
 
 Thanks a lot, and please excuse my lack of expertise - I'm just getting started learning.

Raphael Alganes · Answer

Hello, 
 For Data Control List Feature of Sophos Firewall (Under Email Protection Feature) you may want to check here: https://docs.sophos.com/nsg/sophos-firewall/21.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/DataControlList/index.html 
 And I believe what you're looking for, as you stated here, is not under the feature listed above: 
 siven said: By DLP, I’m referring to scenarios like preventing classified Excel sheets from leaving the organization or restricting certain behaviors of USB drives, etc. 
 You might want to look for endpoint solution and not a Firewall for this. 
 DLP on Endpoint: 
 - https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/EndpointProtection/datalossprevention/index.html 
 - https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/DataLossPrevention/index.html 
 Peripheral Control 
 - https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/EndpointProtection/ConfigureDeviceControl/index.html 
 I may also recommend you to get in touch with your local Sophos Sales Engineer or local Sophos Partner to have your requirements further discussed and scoped accordingly. 
 Hope this helps and thank you for choosing Sophos. 
 Regards,