Sophos Central Email Advanced
Protect and manage your email with Sophos Central

Overview:

Cloud Email security powered by artificial intelligence Sophos Email is cloud email security simply delivered through Sophos Central’s easy-to-use single management console. Protecting your people from unwanted and malicious email threats today, and tomorrow, with the latest artificial intelligence.

Highlights

• Predictive email security able to block known and unknow threats
• Stop ransomware, spam, and phishing attacks
• Support for all major platforms
• Automatic Active Directory Synchronization
• Self-Service Portal with end-user and admin controls

Smarter Email Security

Today’s email threats move fast, and malicious files look more and more like benign files. Growing businesses need predictive email security - defeating today’s threats with an eye on tomorrow.

See the Future

Using the same technology as our award-winning Intercept X, the artificial intelligence built into Sophos Email’s Sandstorm sandboxing technology is a deep learning neural network, able to detect suspicious payloads containing threats, malware and unwanted applications, as well as high-level threats embedded in documents, including ransomware.

Sophos Sandstorm detonates these files in series of virtual machines, simulating a real end user environment where behavior can be monitored. Delivering safe documents – not just PDFs.

Block Stealth Attacks

Protecting employees from malicious website links, our advanced URL protection is out-smarting attackers who slip phishing URLs past traditional gateways - delaying the upload of malware to websites until after the email is delivered. Sophos Time-ofClick checks website reputation before delivery and at the time you click – blocking stealthy, delayed attacks.

Trust Your Inbox

Attackers relentlessly target organizations with spam, phishing, and advanced socially engineered attacks. Automate phishing imposter defense with Sophos Email authentication. Protecting your employees from phishing attacks using fraudulent email addresses that impersonate trusted contacts and domains, before they reach the inbox.

Using a combination of SPF, DKIM and DMARC authentication techniques and email header analysis, Sophos Email allows you to identify and allow legitimate emails from trusted partners, and block the imposter – allowing you to trust your inbox again.

Flexible Deployment

Sophos Email was born to be flexible. Creating unique security policies for individuals, groups or the whole domain can be done in minutes – saving you valuable time.

While seamless integration with Microsoft Office 365, Google G Suite, on-premises Exchange 2003+, and many more email providers, allows you to protect any email service where you control the domain and DNS records. Best of all - activation is completely in your control, with administrator controls and end-user self-service for common day-to-day tasks.

Secure Office 365

The answer for business-grade email. Email, Office, Collaboration – Microsoft Office 365 is a great tool for businesses to stay productive. But as customers move to O365, the security features often don’t live up to expectations. Great collaboration needs great security, and Sophos Email provides a simple solution:

• One Advanced license secures Office 365 from the latest spam, phishing and advanced threats
• Ensure compliance with a choice of location for email scanning and sandbox analysis
• Single easy-to-use management console

Getting Started is Easy

Deployment requires a simple MX record change to route email through Sophos Central, and you can simply bring in users and their mailboxes with our handy Azure and on premise Active Directory synchronization tools.

How to Buy

Priced per user with bands from 5 to 5000+, Sophos Email keeps things simple so you can focus on protecting your business, data and employees.

What's New:

Sophos Email is email security delivered simply through Sophos Central’s easy-to-use single management console, protecting your users from unwanted and malicious email threats today, and tomorrow, with the latest artificial intelligence to defend against ransomware and zero-day malware.

The latest enhancements to the Sophos Email go further, preventing outbound email data loss and inbound malware threats; synchronizing defenses with Sophos Endpoint and Phish Threat to respond to email threats inside your organization; and enhance reporting and policy control to provide greater visibility.

Email Content Control- Early Access Program

Sophos Email Advanced Content Control makes it easy to analyze email content and attachments for all inbound and outbound messages.

• Create multiple policies for groups and individual users
• Filter inbound and outbound messages for keywords and file types
• Identify specific keywords in email subject lines, message content, and file names
• Quarantine, delete, or strip attachments from email messages to prevent data leaks and malware threats

Prevent data loss

Control sensitive information leaving the organization by scanning all emails for keywords and file types.

Stop hidden malware

Superior malware protection blocks hidden threats that use forged file names to look safe, analyzing multiple attributes of a file to detect the true identity.

Reduce the risk from phishing imposters

Automate phishing imposter defenses with keyword filters to block or quarantine sent emails and remove attachments displaying sensitive keywords in the file name.

Sophos Email Encryption – Early Access Program

Secure sensitive data and make compliance easy, with easy-to-use secure email encryption from Sophos. Converting a standard email into one with encrypted attachments - sent direct to the recipient’s inbox.

• Encryption setup in minutes - with the ability to encrypt the entire email or attachments only
• Flexible policy control - allows organizations to encrypt all outbound messages sent to a set list of recipient addresses and domains
• Send secure messages fast – using the O365 add-in button, or by adding the organisations custom subject line tag to the message i.e. “Secure: ***”
• Reply securely – with Sophos Secure Messaging Portal for secure email replies, including attachments

Connected email security

In November 2018, Synchronized Security took Sophos Email beyond the benefit of unified management in Sophos Central. Creating new ways to connect email security with endpoint and Phish Threat end user security training to respond to risks inside your organization:

Compromised mailbox detection

Link Sophos Email and Sophos Endpoint to automatically detect and clean up infected computers sending outbound spam and viruses.

Thanks to its shared user list, Sophos Central is now able to link mailboxes protected by Sophos Email with the associated computers protected by Sophos Endpoint security. Once linked, if Sophos Email detects five or more spam or virus emails sent in 10 minutes, the mailbox is automatically blocked while an endpoint scan is carried out and the infection removed, and alerts shared via Sophos Central.

Sophos Central products required: Sophos Email Standard or Advanced and Sophos Endpoint

Identify and train at-risk users

Link Sophos Email and Phish Threat to identify risky user behavior and launch targeted security awareness training.

The new Sophos Email Advanced ‘At Risk Users’ report highlights exactly which users are clicking email links re-written by Time-of-Click URL protection. This identifies users who have either been warned or blocked from visiting a website due to its risk profile. You’re then simply one click from the report to enroll users in Phish Threat simulations and security awareness training – increasing their threat awareness and reducing risk.

Sophos Central products required: Sophos Email Advanced and Sophos Phish Threat

Enhanced reporting

Added in August 2018, new detailed message summaries, mailbox search and policy enhancements makes Sophos Email even more valuable to email administrators.

• Detailed message SummariesStarting from the ‘Message History’ report in Sophos Central. Simply selected the new clickable email subject line of the message you’d like to inspect and you’ll receive a breakdown of helpful information, including:
• Details of the sender, recipient, date, and time
• Full message header information and any attachments
• Details of the steps the message has passed through in our scanning infrastructure
• More visibility into the current status of the message within the scanning process, from sending receipt to the delivery to your inbox

Mailbox search and policy enhancements

Finding specific user mailboxes is now a simple task with the new Mailbox Search feature within the ‘Mailboxes’ menu option.

While improvements to the Allow and Block Senders policy now allow you to specify specific IP address entries and wildcards, including country level domains such as.co. Expanding your policy control from specific email addresses or domains for inbound or outbound messages.

Features:

Synchronized Security:

Connected email protection with Sophos Synchronized Security

Your mailbox is more valuable than ever to attackers, with 93% of company security breaches now starting with a phishing email. Whether users are targeted to receive phishing emails, or they have their mailbox compromised to send spam and viruses from your organizations domain, the risks to your organization are great.

Connected email security is better security

Sophos Email is email security delivered simply through Sophos Central’s easy-to-use single management console, protecting your people from unwanted and malicious email threats today, and tomorrow, with the latest artificial intelligence to protect against ransomware and zero-day malware.

Synchronized Security has now taken Sophos Email even further. It creates new ways to connect email security with endpoint and end user security training to respond to risks inside your organization:

Compromised mailbox detection: Link Sophos Email and Sophos Endpoint to automatically detect and clean up infected computers sending outbound spam and viruses.

Identify and train at-risk users: Link Sophos Email and Phish Threat to identify risky user behavior and launch targeted security awareness training.

Highlights

• Respond to email threats inside your organization
• Synchronized Security now connects Sophos Email to Endpoint and Phish Threat
• Detect and clean up computers sending outbound spam and viruses
• Identify and enroll risky email users in Phish Threat training

Synchronized Security use case 1

I want to stop our corporate mailboxes from being used by attacks to spread spam and phishing

Your computer is often the key to your mailbox. When an attacker steals credentials to that computer, or infects it with malware, you can soon find your mailbox responsible for sending spam or viruses. This malicious activity can impact your reputation as an email sender, leading to blocked messages, and damaging your reputation as a trusted business.

That’s why Sophos Synchronized Security now connects Sophos Email with Sophos Endpoint, delivering automatic detection and cleanup of infected computers sending outbound spam and viruses.

Thanks to its shared user list, Sophos Central is now able to link mailboxes protected by Sophos Email with the associated computers protected by Sophos Endpoint security. Once linked, if Sophos Email detects five or more spam or virus emails sent in 10 minutes, the mailbox is automatically blocked while an endpoint scan is carried out and the infection removed, and alerts shared via Sophos Central.

Sophos Central products required: Sophos Email Standard or Advanced and Sophos Endpoint

Synchronized Security use case 2

I need a more targeted approach to security awareness training

50% of employees admit clicking on an email link from an unknown sender in the last six months that turned out to be a virus or scam. Regular attack simulations and security awareness training make all the difference, with existing Phish Threat customers able to reduce susceptibility to attack by 31% in just four tests (opening and clicking).

But while you train all users on the latest cyber threats, how do you find and train the weakest links in your organization? Those who exhibit the riskiest behavior?

The new Sophos Email Advanced ‘At Risk Users’ report highlights exactly which users are clicking email links re-written by Time-of-Click URL protection. This identifies users who have either been warned or blocked from visiting a website due to its risk profile. You’re then simply one click from the report to enroll users in Phish Threat simulations and security awareness training – increasing their threat awareness and reducing risk.

Sophos Central products required: Sophos Email Advanced and Sophos Phish Threat

Getting started with Sophos Email

Deployment requires a simple MX record change to route email through Sophos Central. You can simply bring in users and their mailboxes with our handy Azure and on-premises Active Directory synchronization tools.

Priced per user with bands from 5 to 5000+, Sophos Email keeps things simple so you can focus on protecting your business, data, and employees.

Videos:

Specifications:

Documentation:

Download the Sophos Email Data Sheet (PDF).

Download the Sophos Email What's New Fact Sheet (PDF).

Download the Sophos Email and Synchronized Security Data Sheet (PDF).