D A T A S H E E T
Security Health Check PlusFor Sophos ProductsSophos Endpoint – Email – Web – Encryption – NSG/UTM – Mobile Control
WHAT IS A FOURSYSSECURITYHEALTH CHECK?A Foursys Security Health Check is a
detailed assessment of the Sophos
product used on the network. How it is
currently configured and how it could be
configured to optimise network security
with best practice recommendations; all
delivered using the experience of our
Sophos trained Security Consultants.
Time permitting, Foursys Security
Consultants will also assist with the
implementation of these recommendations
(including full product upgrades, if that
forms part of the recommendation), while
ensuring customer involvement throughout
the whole process.
Foursys will provide a detailed site visit
report following the Security Health Check
service, with an analysis of the present
situation, work undertaken and prioritised
recommendations.
All work is backed by our Professional
Services Guarantee (see over).
WHAT IS SECURITYHEALTH CHECK PLUS?Foursys will also provide priority technical
support for Sophos Endpoint (and Email
if needed) including Remote Support
using Webex when needed. Up to 12
support tickets are included per year at
no extra charge within Security Health
Check Plus.
WHY SHOULD YOUHAVE A FOURSYSSECURITY HEALTHCHECK?Because Anti-Virus is not enough to
prevent malware infection.
Today’s threats can spread through open
shares, unpatched workstations and
removable media. That means a Client
Firewall, Device Control and Application
Control are required to prevent modern
malware threats spreading through a
network. Some virus infections are not
stopped or even contained by an Anti-Virus
product alone.
Sophos produces an Endpoint Protection
Solution to protect against these very
threats and Foursys has the expertise to
help an organisation implement these
controls quickly and easily.
Below are some of the security and data
protection capabilities that can be
deployed either during or following a
Health Check. Note that some facilities are
not included in all Endpoint licences.
Contact Foursys if you are not sure or to
discuss an upgrade.
• HIPS – Updated pre-execution analysis
prevents files that have suspicious
behavioural characteristics from running.
Optionally enabled cloud-based lookups
further enhance accuracy and
detection rates.
• Application Control – Block
unauthorised applications from executing
on the network. Prevent P2P applications
downloading malware or Instant
Messaging bypassing email controls. All
application controls can be configured in
an initial monitor only mode.
• Device Control – Take control of
Removable media like USB sticks and
CDs. Prevent malware from reaching
desktops and data loss leaving them.
Monitor devices attached to any Sophos
protected desktop, then lock down their
use with flexible policies that can give
complete control (even down to the
serial number of the device attached).
• Client Firewall – Malware can spread
through network shares exploiting
weaknesses in the client configuration.
The Sophos Client Firewall gives control
over network shares and network
Tel: 01223 810 910Fax: 01223 810 912Email: [email protected] Ltd, 2 Stow Court, Stow Road,Quy, Cambridge CB25 9AS
© Foursys Limited 2011. All rights reserved.
www.foursys.co.uk
D A T A S H E E T
Security Health Check Plus For Sophos Products
programs/ports, allowing access to
required resources whilst securing
endpoints from attack.
• Web Browsing Security – Help
prevent users downloading viruses from
known malware sites by utilising Sophos
Live Protection which is now standard
within Endpoint. Additional web security
including policy control and reporting is
available using an optional Endpoint Web
Filter or the full Web Protection Licence,
and a virtual or physical appliance.
• Data Leakage – Over 50 content lists of
data types such as credit card numbers
are available to monitor and if you wish,
control data leaving your organisation
from the desktop through email, web, IM,
removable media etc). Simple but
effective data leakage and control.
• Exchange server – Endpoint licences
now include Sophos PureMessage for
Exchange to protect email servers from
malware and undesirable content.
• Full Disk Encryption – Protect data on
laptops or desktops with an easy to use
full disk encryption product.
• Tamper Protection – Prevent Endpoint
removal or configuration change through
password protected policies.
• Sophos Patch – Now included in
Endpoint this provides security
oriented patch assessment and in a
later release patch remediation.
Microsoft, Adobe and 13 other vendors
patches are prioritised based on security
risk with all management and reporting
available under the Sophos
Endpoint console.
You may want to use just some of these
facilities, but advice on which is most
suitable and how they could be
implemented will be a vital factor in
improving your security using
Foursys expertise.
WHY FOURSYS?Foursys has over 900 Sophos customers
with over 1.3million licensed users, and has
been recognised as the top Sophos UK
partner for the last 9 years. All Foursys
services are covered by our “Professional
Services Guarantee” of complete
satisfaction with our work.
WHAT SECURITYHEALTH CHECKSARE AVAILABLE?• Sophos Endpoint - the most widely
used Health Check Service detailed here.
• Sophos Email/Web - An add-on to
the Endpoint Health Check for those
with Sophos PureMessage, Sophos
Email or Web.
• Sophos Encryption - Including Disk
Encryption, Removable Media and other
Encryption modules.
• Websense Web & Email Security –
Recommendations around deployment,
configuration, patching, alerting or
upgrading of Websense products in line
with security best practice.
All Security Health Checks can be ordered
as an annual service from 1 up to 5 years
so you can fix the costs of a Foursys
Health Check at current prices.
One day onsite (or longer if more products) �
Clear written report with prioritised recommendations �
Initial scoping and overview of how Sophos product is installed atcustomer site(s)
�
Check status of server configuration (and client if applicable) �
Review version level, check rules/policies against best practice and directoryintegration and discuss recommendations with customer �
Priority Technical Support (9-5, Monday to Friday) – 10 tickets included per year �
Remote Technical Support included as well as Telephone/Email Support �
*Upgrade server (and client) to latest version �
*Investigate customer specific issues �
*Knowledge transfer on new features to enable their continued use �
*Note: depending on size and complexity of site this work may not becompleted on the day or require additional day(s) to be implemented �
by the customer and/or Foursys
Foursys Security Health Check SophosEndpoint– what is included
Foursys ProfessionalServices GuaranteeIf you are not satisfied, or ifcircumstances outside our controlprevent the services work beingcompleted, then a Foursys engineerwill return at no extra charge tocomplete the work required or thecost of the work will be refunded.
Foursys professional services andtraining courses are provided bycertified engineers with practicalexperience in the products involved.