Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Replies 9 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 10086 views
  • Users 0 members are here
Options
Suggested

DNS but how does it fit with Sophos other Products

Valvaris Sigma

Hello Sophos-Team,

as feedback to why to use Sophos DNS I do not understand:

- Transmission to Uplink DNS is not encrypted (DNS over HTTPS or DNS over TLS)

- DNS Validation is not done too DNSsec

The Current Products in the grand scheme of things are sufficient and already prove to be a challenge.

If your Infrastructure is protected by:

- Sophos XGS Firewall

- Sophos Intercept X Adv. with XDR (for Server too)

- And you setup your DNS Chain to best practice. (Client -> Firewall -> Domain Controller (or) Public DNS

The Sophos XGS Firewall does already have DNS request routing and does this fairly good and encourages Best Practice.

Now with all of the Products active you have three different Screens to worry about blocked content:

- Sophos Endpoint Protection (Web Control - SSL Inspection - Application Control)

- Sophos Firewall (Web Control Policy - SSL Inspection - Application Control)

This would make troubleshooting a mess if things are not centrally Controlled and Managed. What I mean to say is to be able to have one plane of glass that works with all of the great security solutions Provided. 

Plus atm DNS Querys are Super slow. ;)

Sincerely

Val.

Parents
  • 0

    Thanks very much for your feedback.

    Using secure transports is something that is on our roadmap after the release of version 1.

    The resolver does perform DNSSec validation. I'll reach out to you over DM if you're willing to give us a bit more detail of your concerns here.

    Managing all these products in Sophos Central gives us the opportunity to combine alerts over time. For example, the recent changes to the main navigation Central are just the first step in a range of improvements that will include customizable dashboards that will combine output from multiple products on a single screen. 

    DNS query response is mainly a factor of the location of our resolver services, which is still limited but which will expand by the time we reach the full release for the product.

  • 0 in reply to RichBaldry

    Will Sophos have public DNS resolvers that regular users can point to for malware protection? Or will it be for Sophos Firewall customers only? Since they seem to be heavily invested in DNS now I imagine they would offer something similar to other public DNS resolvers with adware/malware/parental site blocking eventually.

    Of course Sophos probably wants to keep their products within the Sophos Central ecosystem, but it would be a good way to broaden their exposure to different areas.

  • 0 in reply to alan weir

    While we don't have any plans right now to extend availability of the product to home users or folks who aren't Sophos customers, I wouldn't want to rule it out completely.

    Our immediate focus is to get the service up and running and delivering value for our Sophos Firewall customers.

Reply Children
No Data
Unfiltered HTML