Adaptive Assault Safety is a strong and distinctive differentiator in Sophos Endpoint. It dynamically allows heightened defenses when a “hands-on-keyboard” assault is detected. On this elevated mode of safety, actions which can be normally benign however generally abused by attackers are blocked outright by Sophos Endpoint – dramatically lowering the chance of the assault’s success and providing you with extra time to neutralize the menace.
Watch this 2-minute video for an outline of Sophos Adaptive Assault Safety.
As attackers proceed to innovate of their approaches, we’ve prolonged this distinctive safety with extra capabilities that additional defend Sophos Endpoint clients in opposition to energetic adversaries.
Higher Safety, Extra Management, Elevated Visibility
This Sophos-exclusive safety functionality is now even stronger. All Sophos Endpoint clients now profit from numerous important enhancements:
- Higher safety. Prospects now have the choice to use particular Adaptive Assault Safety blocking guidelines persistently by way of new coverage settings of their Sophos Central cloud-based administration console.
- Extra management. Prospects can now manually activate (and deactivate) Adaptive Assault Safety on a tool to use extra aggressive safety whereas investigating suspicious exercise – ultimate for eventualities the place absolutely isolating the gadget from the community could trigger important operational disruption to the group. You can too prolong the time that Adaptive Assault Safety is activated on a tool to offer extra time to finish an investigation.
- Elevated visibility. New Adaptive Assault Safety occasions and alerts notify you when a tool is below assault and urge responders to take motion to neutralize the menace.
New handbook controls for Adaptive Assault Safety.
New alerts notify clients when Adaptive Assault Safety is activated on a tool.
New Secure Mode Safety
When adversaries fail to interrupt by runtime safety layers on an endpoint, they typically try and restart the gadget into Secure Mode, the place safety software program just isn’t current or minimal. Sophos Endpoint now protects in opposition to adversary abuse of Secure Mode with two new capabilities:
- Block secure mode abuse: A brand new Adaptive Assault Safety persistent coverage rule is now accessible that stops adversaries from programmatically restarting gadgets into Secure Mode.
- Allow safety in secure mode: Sophos Endpoint safety capabilities, together with our unmatched CryptoGuard anti-ransomware know-how and AI-powered malware safety, can now be enabled on gadgets operating in Secure Mode.
New secure mode safety coverage settings.
Adaptive Assault Safety is out there to all Sophos Endpoint clients at present.
To study extra about Sophos Endpoint and the way it will help your group higher defend in opposition to at present’s superior assaults, communicate with a Sophos adviser or your Sophos associate at present.
