Sophos has announced that its next-generation anti-ransomware CryptoGuard technology is now available with its SophosServer Protection products.
According to the firm, with this optimisation, the Sophos Server Protection now has signature-less detection capabilities to combat ransomware – similar to Sophos Intercept X for endpoints.
In September 2016, the company launched SophosIntercept X with CryptoGuard, which halts the spontaneous encryption of data by ransomware within seconds of detection.
By adding CryptoGuard to server security, the endpoint security firm is closing a critical gap by preventing ransomware attacks that could come in through rogue, guest or remote access users or other weaknesses in a company’s network.
“Servers are considered the jackpot for cybercriminals, since they can store confidential corporate and employee information, medical records with social security numbers or private customer documents. It would be devastating for organisations to lose this kind of sensitive data to ransomware,” said Dan Schiappa, senior vice president and general manager of Sophos’ Enduser and Network Security Groups.
He added that most organisations back-up their data, however, recovery from a backup is not always easy. “Businesses, schools or hospitals do not want the liability, hassle and operational disruption required to restore from a backup,” said Schiappa. “Anti-ransomware technology is a critical layer for the protection and ongoing accessibility of the information that resides on servers. Sophos has optimised its Server Protection products with CryptoGuard, adding another layer of next-gen protection to block this pervasive and highly-damaging cyber threat.”
Sophos has also expanded Synchronised Security by adding Sophos Security Heartbeat capabilities to Sophos Central Server Protection Advanced. By adding Security Heartbeat to servers, an IT administrator can now leverage Sophos XG Firewall to automatically isolate infected servers and endpoints to identify and respond to the source of compromises faster. Sophos Central Server Protection also includes Malicious Traffic Detection, which monitors for traffic to Command and Control servers and application white listing with one-click Server Lockdown, which secures servers in a safe state and prevents unauthorised applications from running.
Sophos Server Protection products with CryptoGuard capabilities now includes Central Server Protection Advanced on the cloud-based Sophos Central platform and Sophos Server Protection Enterprise, which is managed with a traditional on-premise console.
