The team is pleased to announce the General Availability of Sophos DNS Protection. This cloud-based service is available at no extra charge to all Xstream Protection licensed Sophos Firewall customers.The release will be managed in stages and we will be increasing the number of customers for whom it is available over the coming weeks.
Enhanced Internet and Web Security
Sophos DNS Protection adds another layer of security to every network. It works to instantly block access to unsafe and unwanted domains across all ports, protocols, and applications at the earliest opportunity – from both managed and unmanaged devices. DNS protection perfectly complements and augments your existing network security and policy enforcement tools - from Sophos or any other vendor. DNS Protection can be deployed in just a few minutes; it’s never been easier to roll out additional security to your organization.
Sophos DNS Protection is a globally accessible domain name resolution service with integrated policy controls and reporting in Sophos Central. Sophos DNS Protection is backed by SophosLabs’ AI-powered threat intelligence, providing real-time world-wide protection from high-risk domains. As soon as a malicious domain is discovered, it is shared across all customers instantly, providing immediate protection for all customers. By using Sophos DNS Protection in place of your existing public DNS resolver, you can prevent any devices on your network from accessing domains associated with security threats and other unwanted websites controlled through policy.
Protection for networks
Access to the Sophos DNS Resolver is based on the originating public IPv4 address of the DNS queries. Hence, protecting individual devices for remote workers that move from network to network (or site to site) is not viable at this time.
Networks with dynamic public IP addresses are supported by using a Dynamic DNS hostname to specify the location address.
Integrated Dashboard and Reporting
Sophos DNS Protection also provides in-depth visibility into the domains visited from your network with comprehensive dashboarding and reporting.
Full reporting with all the same options as Central Firewall Reporting Advanced is also included:
Cross-Product Integration
Sophos DNS Protection’s log data and intelligence are also shared with the Sophos data lake for Sophos XDR and MDR threat-hunting analysts to help detect active adversaries and threats operating on the network.
Getting Started
Sophos DNS Protection is available to all licensed Sophos Firewall customers who have the Xstream Protection bundle. If you don’t already have the Xstream Protection bundle, upgrade today, as it provides the best protection possible and offers tremendous value. To check what license you currently have, login to your firewall and go to Administration > Licensing.
Getting started with Sophos DNS Protection is easy: add your locations, set your DNS settings, create a policy, and go!
Watch this video to see how easy it is to get started with Sophos DNS Protection: https://techvids.sophos.com/share/watch/YKKJiTqRndLS1eKRKsdJqe
Consult the full documentation for additional information.
To ensure you get a good experience as you start to use DNS Protection, we're limiting the number of accounts that can start using DNS Protection and will be increasing that limit in stages over the coming weeks. If you can't access the product immediately, please wait for the later stages.
A special thanks to all of our Early Access Program participants for helping pilot this service and make it the best it can be.