XGS 138 Zero-Day Protection

Simple and powerful next-generation threat defense

Sophos is at the forefront of the IT security industry in combating malware with highly effective technologies such as real-time JavaScript emulation and behavioral analytics. Traditional malware protection remains important as a first line of defense. However, organizations need additional tools to reliably defend against targeted malware. Sophos Sandstorm is our solution for defending against advanced persistent threats (APT) and zero-day malware, and can be used as a complementary feature with Sophos security products. Using powerful cloud-based next-generation sandbox technology, Sophos Sandstorm enables fast and reliable detection, blocking and response to evasive malware that other solutions miss.

Pre-execution analysis

Before anything suspicious lands in the sandbox, the file (and/or your attachments) is checked against a Sophos database, where after just a few seconds it can be determined if the file contains malware, determining the next course of action.

Advanced protection against targeted attacks

Keep unknown data-stealing malware out of your network. With our powerful cloud-based next-generation sandbox technology, you can quickly and reliably detect, block, and respond to APTs and zero-day threats.

Easy deployment

Sophos Sandstorm is fully integrated with your Sophos security solution. All you need to do is update your subscription, apply the Sandstorm policy, and you're protected from targeted attacks. The whole process takes just minutes.

Blocks evasive malware that others miss

With Sophos Sandstorm, you'll also detect unknown threats specifically designed to surround first-generation sandbox appliances. With our cross-system emulation approach, you get detailed visibility into unknown malware behavior and detection of malware attacks that others simply miss.

Forensics Reports

Respond to sophisticated threats faster with simple, event-driven breach analysis. We provide you with prioritized APT data based on correlation of evidence. This approach not only reduces disruption, but also saves you time.

Comprehensive Analysis 

Discover potentially malicious behaviors across all your end-user devices and critical infrastructure. This includes your operating systems (Windows, Mac OS X and Android), physical and virtual hosts, services, network infrastructures, and web, email, file and mobile applications. Threats can run safely in the Sandstorm cloud, so there's no exposure to dangerous malware for your data centers.

Lightning-fast performance

Your Sophos security solution does precise pre-filtering of your traffic so that only suspicious files are sent to Sandstorm. This way, we ensure that latency and end-user impact is as low as possible.

Note for license renewals:

A license renewal requires an existing license. If you are not sure about this, just contact us - we will help you