Sophos Central Device Encryption
The easiest way to manage full disk encryption

Overview:

Each year, millions of laptop computers are misplaced, stolen, or lost; many of them containing important and sensitive data. Full disk encryption is the essential first line of defense to protect your data in any of these events. Sophos Central gives you the ability to manage full disk encryption from a single, integrated, web-based management center.

• Manage Windows BitLocker and macOS FileVault full disk encryption centrally from a single console
• Proof-of-compliance reporting
• Self-service key recovery
• User-centric management
• Per-user pricing
• Quick deployment

Securing data and staying compliant
The majority of mobile professionals carry laptops containing confidential company information. Passwords alone do not protect data. The best way to make sure your data is secure at rest is by encrypting the computer's hard drive. As a part of compliance requirements, you are likely to be able to verify which computers in your organization are encrypted. And in the case of lost or stolen laptops, organizations also need to provide proof that these missing devices are encrypted.

Quick deployment
Sophos Central Device Encryption lets you centrally manage Windows BitLocker and macOS FileVault native device encryption. With Sophos Central’s web-based management, there is no server to deploy and no need to configure back-end key servers. You can deploy and start securing data in minutes. For existing Sophos Central Endpoint Protection customers, there is no additional agent required. Over-the-air deployment means that it takes only a couple of clicks to push out the new encryption policy. And, it lets you easily secure data on remote laptops.

Unified management interface
Manage your encryption policy, encryption keys, as well as all your essential security policies using Sophos Central, a web-based integrated management console. Sophos Central provides an intuitive view for all your Sophos security products.

Simple user-centric management
Sophos Central is centered around the user. When a user has more than one computer, you can enable device encryption and protect all of the user's computers with one easy action.

Secure key recovery via our self-service portal
Sophos Central Self Service lets users retrieve their own full disk encryption recovery keys. This helps users get back to work faster without needing to contact the help desk, saving both time and IT resources.

Feature Comparison

	Sophos Central Device Encryption	Sophos SafeGuard Disk Encryption
Manage BitLocker on Windows
Manage FileVault on Mac
Sophos full disk encryption for Windows 7 versions without BitLocker	—
Centralized management console	Sophos Central (Web-based)	SafeGuard Management Center (On-premises)
Self-service PIN/password recovery	Yes, via Sophos Central Self Service	Yes, via the Sophos Secure Workspace mobile app*
Compliance and reporting
Encryption standard	XTS-AES 256 for Windows/XTS-AES 128 for macOS	AES 256
Deployment	Simple over-the-air deployment withno server or database setup needed	Deploys via SafeGuard agent

*Requires Sophos Mobile Control Advanced

System requirements

• Windows 7 or higher (versions including Windows BitLocker)
• macOS 10.10 (Yosemite) or higher

How to Buy:

License Options

SafeGuard Enterprise and Sophos Mobile Control Advanced bundle

Combines the best of both worlds. Get the entire SafeGuard Enterprise bundle, seamlessly integrated with our Sophos Mobile Control mobile device management platform.

SafeGuard Enterprise Encryption

Our SafeGuard Enterprise Encryption includes SafeGuard Disk Encryption and SafeGuard File Encryption in a single convenient license. To secure your data everywhere and prevent data loss, you need both full disk encryption and file encryption. SafeGuard Enterprise provides both capabilities, along with centralized management and reporting.

SafeGuard File Encryption

SafeGuard File Encryption provides file-level encryption through two options: file/folder encryption and next-generation synchronized encryption. Regardless of the option you choose, you can still secure files everywhere; on computers, removable media, cloud storage, and through file shares.

SafeGuard Disk Encryption

Sophos provides centralized management for full disk encryption with the ability to centrally manage device encryption for BitLocker/FileVault 2. You can deploy and manage full disk encryption across Windows and Mac computers using SafeGuard Disk Encryption or Sophos Central Device Encryption.

Sophos Central Device Encryption

Sophos Central Device Encryption lets you centrally manage Windows BitLocker and macOS FileVault native full disk encryption from the simple, intuitive, web-based interface. There is no server to deploy and no need to configure back-end key servers, meaning you can deploy and start securing data in minutes.

Modules	Sophos Central Device Encryption	SafeGuard Disk Encryption	SafeGuard File Encryption	SafeGuard Enterprise Encryption	SafeGuard Enterprise Encryption and Sophos Mobile Control Advanced
Manage BitLocker and FileVault Centrally manage native operating systems’ encryption technologies
Full Disk Encryption for Legacy Systems Full disk encryption for Windows 7 systems without BitLocker
Password Protect Files Create self-extracting, password protected HTML5 files for secure collaboration with external parties
File/Folder Encryption Protect files on selected folders
Encryption for Removable Media Protect data on removable devices, such as USB sticks and optical media
Encryption for File Shares Protect files and folders on local or network shares
Centralized Management Set policies for groups and devices from a centralized console	Web-based	On Premises	On Premises	On Premises	On Premises
Cross-Platform Key Management Ensure only your users with authorized application have access to your encrypted data
Compliance and Reporting Demonstrate compliance with data security regulations
Secure Workspace Enable secure collaboration across iOS and Android, providing seamless access to encrypted files
Self-Service Key Recovery Allows users to access recovery key for BitLocker and FileVault device encryption
Mobile Security View, access, and share encrypted data on mobile devices
Mobile Device Management Protects data in the event of a lost or stolen device

Documentation:

Download the Sophos Central Device Encryption Data Sheet (PDF).