Sophos ES150 Email Appliances
Advanced email security and control made simple

Overview:

Our purpose-built secure email gateway is an all-in-one solution for email encryption, DLP, anti-spam and threat protection. It provides advanced protection from today’s sophisticated spear phishing attacks and gives you full control over data leaving your organization via email.

• Block targeted spear phishing attacks
• Protect users from new zero-day threats
• Advanced multi-layer spam detection
• Support for SPF and DKIM anti-spoofing
• Easily create DLP policies
• Unique SPX Encryption is easy and transparent

Advanced threat protection

Sophos Time-of-Click protection blocks malicious email URLs, protecting your users from stealthy, delayed, spear phishing attacks. Every URL, in every email, is secured. Every time an email link is clicked, on any device, its reputation is checked against our cloud-hosted Sophos SXL database. No client software is required, speeding implementation and reducing user disruption. Our new Sophos Sandstorm* enhances targeted attack protection, visibility, and analysis. Sandstorm complements our advanced antivirus scanning engine to quickly and accurately detect, block, and respond to evasive threats using powerful cloud-based, next-generation sandbox technology.

Quick and easy data protection compliance

Our wizard-based DLP rules and policy-based encryption makes email data protection simple— preventing costly data-loss incidents. Using our built-in lexicon of hundreds of sensitive data types, you can quickly and easily build DLP policies for users or groups. Protect your information by blocking messages containing sensitive data or by encrypting them before they leave the network gateway.

SPX Encryption—encryption you can use

Our patent-pending simple SPX Encryption is transparent, simple and requires no changes to user workflow. It doesn’t require clumsy and expensive key management or additional software. SPX Encryption simply encapsulates the email content and attachments into a secure encrypted PDF that can’t be hacked or cracked. But it allows users to view their encrypted email anywhere: in their preferred email client, in their webmail or on their mobile device.

Stamp out snowshoe spam and suspicious email content

Our sophisticated email filtering protects users from the latest snowshoe spam, identity theft, password scams and more by looking for suspicious content, attachments or URLs. Support for Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) ensures spam and phishing attacks attempting to spoof legitimate sender domains are blocked. You can also block unwanted content and be sure our proven antivirus scanning is catching the latest threats.

Simplify mail management

Reduce your workload with our streamlined management console and managed appliances that offer the best of an on-premise appliance with a managed service. You get automated updates and we monitor your appliances remotely to ensure everything’s running as it should.

Flexible deployment options

Choose from a variety of hardware appliance options or our popular VMware Ready virtual appliance. Our simple integration with Microsoft Active Directory and eDirectory will have you up and running with just a few clicks.

Features:

Dedicated or Unified

You can choose a dedicated purpose-built email appliance, or a secure email gateway integrated into your UTM. Both products offer unparalleled message security, encryption and ease-of-use.

Sophos Email Appliance is ideal if you want an appliance dedicated to message security with advanced DLP and easy policy-based encryption. Or, if you prefer consolidating your network security into a single appliance, our UTM with integrated email protection is for you.

---

Effective Anti-Spam

Keep your inboxes free of spam and phishing attacks.

• Reputation filtering blocks 90% of spam at the gateway, before it consumes any of your network resources
• An anti-spam engine catches the rest, including the latest phishing attacks
• Filters incoming email using a variety of advanced detection methods, across dozens of languages

---

Transparent Encryption

Encrypt and digitally sign your sensitive email—automatically and transparently. Our dedicated Email Appliances stop inadvertent data leakage and make compliance easy, with advanced DLP with policy-driven encryption.

Our unique patent-pending SPX encryption in Sophos Email Appliances allows users to manage their encrypted mail in their preferred email client. With our UTM, you get standardized S/MIME or OpenPGP to guard privacy and ensure authenticity of secure messages. And the best part is, no client software is required.

---

Advanced Threat Protection

We employ dual antivirus-scanning engines that constantly update in real-time to detect the latest threats. We also block unwanted content using MIME type and extension filters.

Protect your users from the latest identity theft, password and banking scams and other incidents. Keep users productive by intercepting all emails containing suspicious content, attachments or URLs.

---

Self-Serve Quarantine

You can give employees direct control over their spam quarantine, saving you time and effort.

Employees can manage their own spam whitelist, review, release and delete spam, and find out what happened to messages that were deleted because of a virus or blacklisted.

The user portal supports 15 different local languages and offers a customizable HTML Welcome page.

---

Simple Management

At Sophos, simplicity is our mantra. You’ll have complete control over all the security features you need all in one place, with none of the complexity.

We've invested heavily in streamlining our interface. This way you won't have to reach for the manual every time you need to update a policy or change a setting. So you're never more than a couple clicks from completing your task.

---

Complete On-Box Reporting

Our built-in reporting means you’ll know exactly what's happening with your users. Fix problems fast and shape your policies, keeping your users secure while boosting network performance. And, you get detailed reports as standard, stored locally with no separate tools required.

At-a-glance flow graphs show usage trends with predefined and customizable reports, providing key web activity. Report anonymization hides user names, requiring the four-eyes-principle to unhide them.

---

Flexible Deployment

Our Email Appliances and UTMs are both available as a virtual appliance, or as a hardware model sized to fit any business.

Cluster your dedicated email appliances for redundancy, performance and easy management. If you choose email protection as part of your UTM, you can centrally manage multiple appliances with our free UTM Manager.

Technical Specifications:

We offer both dedicated and UTM appliance options

Dedicated Sophos Email Appliances

Hardware Appliance Models

	ES150	ES1100	ES5000
Message Capacity	Up to 120,000/hour	Up to 200,000/hour	Up to 550,000/hour
Hardware
Processor	ULV Dual core	Dual core	Quad core
Hard drive	500 GB SATA	250 GB SATA	2 hot-swap 160 GB SAS (RAID 1)
Power supply	260W 100-240V AC	260W 100-240V AC	2 hot-swap 920W 100-240V AC
Mounting	1U rack-mountable	1U rack-mountable	1U rack-mountable
Dimensions	16.8 x 1.7 x 14 in. (427 x 43 x 356 mm)	16.8 x 1.7 x 14.0 in (427 x 43 x 356 mm)	17.0 x 1.7 x 25.6 in (432 x 43 x 650 mm)
Weight	10 lbs/4.5 kg	26 lbs/11.8 kg	45 lbs/20.5 kg
Regulatory/safety certifications	UL 60950, CE, FCC PART 15, VCCI, C-TICK, TUV-GS, SABS, RoHS, WEEE
Support	Up to 3-year advance-replacement hardware warranty (subject to valid software licensing) 24/7 Support

Additional hardware information

• Installation: 1U rack mount
• Regulatory/safety certification: UL, CE, FCC, VCCI, C-Tick, TUV-GS, SABS, RoHS
• Hardware warranty: Up to 3-year advance replacement (subject to valid software licensing)

Virtual Appliance

Sophos Virtual Email Appliance
Pre-defined profiles	Small	Small-Medium	Medium	Large
Capacity: Approximate number of users	300	1,000	5,000	10,000
Capacity: Messages per hour*	60,000	200,000	400,000	600,000
Recommended CPU	1	2	2	4
Recommended RAM	1 GB	2 GB	3 GB	4 GB
Recommended disk storage	20 GB	30 GB	40 GB	50 GB

What you need

• VMware ESX/ESXi 3.5 or 4.x or ESXi 5.x
• VMware Workstation 6.5 or 7.x

Easy centralized management

If you need multiple appliances for added performance or high availability, you can easily cluster hardware and virtual appliances with just a few clicks. Everything else is automatic and you can manage the entire cluster from a single console.

Extend protection to your Internal mail servers

Add Sophos PureMessage for Exchange or Domino to your mail servers to prevent the propagation of malware, viruses, spam or other unwanted content.

UTM Appliances

Hardware Appliance Models

Appliance	UTM 110	UTM 120	UTM 220	UTM 320	UTM 425	UTM 525	UTM 625
Email Throughput (Seen emails/hour)	250,000	250,000	400,000	600,000	1.4 million	1.5 million	2.2 million
Email Throughput (Scanned emails/hour)	30,000	30,000	52,000	78,000	180,000	200,000	250,000

* Assumes a conservative 85% of mail traffic is spam. For actual non-spam related email, assume 15% of these numbers.

Sophos UTM Certificates

• Westcoast Labs Checkmark Platinum Product Award
• ISC Magazine
• InfoTech Research Group Vendor Landscape Award Champion

Virtual Appliance

Sophos UTM virtual appliances are based on the software equivalent. Sophos UTM is the first unified threat management product to be certified as VMware Ready and Citrix Ready. It also runs in Microsoft Hyper-V and KVM virtual environments.

The virtual appliance can be downloaded from Sophos servers and burned independently on CD. A step-by-step deployment of each security component enables a secure migration path into a completely virtualized environment.

Minimum Hardware Requirements

• 1.5+ GHz processor
• 1 GB RAM
• 20 GB hard disk
• Bootable CD-ROM
• 2 or more network cards
• 1 GB RAM
• 40 GB IDE or SCSI hard disk drive
  • 3 PCI-NICs (Internet, Local Net, Demilitarized Zone)

Software Appliance

The Sophos UTM software appliance integrates all security applications with a hardened OS. These are bundled within a self-booting software image for easy deployment on intel-compatible hardware of your choice.

Performance results depend on the selected hardware. Best results are achieved when using hardware specifications at or beyond Intel Dual/Quad-Core CPUs >2GHz, 2GB RAM.

How to Buy:

Two simple steps will get you complete email protection that fits your business:

• Choose Dedicated or Unified
  Choose a dedicated Sophos Email Appliance or Secure Email Gateway protection in our UTM.
• Choose How to Deploy
  Hardware, software, virtual or cloud-based application

You can read more about these steps below. And if you need help deciding what’s right for you, simply contact us or find a Sophos partner. We’ll both be happy to help.

Choose Dedicated or Unified

We offer two Secure Email Gateway product lines to best fit your needs.

• Dedicated Secure Email Appliances

  We offer a full line Sophos Email Appliances that will appeal to the IT Security Manager who wants a purpose-built appliance for message security with streamlined workflow and policy tools that makes administration easy.

  You can choose to buy a Sophos Email Appliance and license Sophos Email Protection alone or as part of a Sophos Security Suite. Both Sophos Enduer Data Suite or Sophos Complete Security Suite include Sophos Email Protection (and you’ll get Endpoint, Mobile, Web and Encryption too).

• UTM Secure Email Gateway

  We also offer a powerful Secure Email Gateway integrated into our UTM appliances that will appeal to the IT Manager that’s interested in consolidating network security capabilities and managing them with a single console.

  When buying a UTM appliance you get the flexibility to license our protection modules individually. Or, you can choose one of our pre-packaged licenses. For secure email gateway protection, you’ll need to license UTM Email Protection. You can buy this module alone, in combination with other UTM modules, or get it as part of the FullGuard license.

Choose Your License

We give you the flexibility to license our protection modules individually. Or, you can choose one of our pre-packaged licenses.

For secure email gateway protection, you’ll need to license UTM Email Protection. You can buy this module alone, in combination with other UTM modules or get it as part of the FullGuard license.

Modules	Next-Gen Firewall	BasicGuard	FullGuard
Essential Firewall – Free Network Firewall, NAT, Native Windows Remote Access Datasheet	Full	Full	Full
Network Protection IPSec/SSL VPN, Intrusion Prevention, DoS Protection Datasheet	Full	Basic	Full
Web Protection URL Filtering, Application Control, Dual Engine Antivirus Datasheet	Full	Basic	Full
Email Protection Anti-spam, Email Encryption, Dual Engine Antivirus Datasheet	Optional	Basic	Full
Wireless Protection Wireless Controller, Multi-SSID Support, Captive Portal Datasheet	Optional	Basic	Full
Webserver Protection Web Application Firewall, Reverse Proxy, Antivirus Datasheet	Optional	-	Full
Endpoint Protection Antivirus, HIPS, Device Control Datasheet	Optional	Optional	Optional

Choose How to Deploy

Choose the right appliance for your environment—is it hardware, software, virtual or even cloud-based?

• Hardware
  A full range of hardware models are available in both our dedicated and UTM appliance lines that offer full secure email gateway capabilities to fit any business.
• Virtual
  Dedicated Sophos Email Appliances are offered as a scalable VMware virtual appliance and UTM’s are certified for use on VMware and Citrix, and also run on Hyper-V and KVM.
• Software
  This Sophos UTM option comes as an image you can install on your Intel-based server hardware of choice.
• Cloud-based appliances
  Using Amazon Virtual Private Cloud (VPC), you can run your UTM in the cloud. Or, you can use the Amazon VPC connector on the UTM at your office for secure and robust access to your Amazon-hosted resources.

Documentation:

Download the Sophos Email Appliances Data Sheet (PDF).