Difference of Webserver protection on buying ssl certificates

Question

Guys 
 Help Please our company are looking to buy SSLcertificates for our website which will cost us a lot. 
 my question is what is the difference between activating the webserver protection in sophos UTM and buying SSL Certificates 
 
 TIA

sachingurung · Answer

Hi Tia, 
 For understanding the need to buy an SSL certificate check here . 
 For Sophos Web Server protection: https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophosutmwebserverprotectiondsna.pdf?la=en 
 Thanks

apijnappels · Answer

Basically a certificate is needed when using HTTPS (and thus encrypted traffic to/from your webserver). 
 Webserver protection physically protects your webserver; it is a so-called reverse proxy where all traffic to your webserver is first evaluated by the UTM and it will only be forwarded to your real webserver if the traffic passes its checks. This decreases the risk that vulnerabilities of your webserver (or database if you use one) can be succesfully exploited.