Blog Detail

Sophos DNS Protection is now available to all licensed Sophos Firewall customers with the Xstream Protection package.

We are pleased to announce the general availability of Sophos DNS Protection. This cloud-based service, managed through Sophos Central, provides an additional layer of network protection and is available at no additional cost to all Sophos Firewall customers with a license for Xstream Protection.

 

Great value for Sophos Firewall customers

Sophos DNS Protection adds great value to our Sophos Firewall customers, who can benefit from this protection at no additional cost as part of our Xstream Protection Package. It allows you to potentially consolidate and save yourself from using another third-party DNS provider or start using a great DNS protection solution without having to pay more.

 

What you get: Greater security on the Internet and on the web

Sophos DNS Protection adds another layer of security to all networks. It works to instantly block access to unsafe and unwanted domains across all ports, protocols and applications at the first opportunity, from both managed and unmanaged devices. DNS Protection perfectly complements and augments your existing network security and policy enforcement tools, and can be deployed in just minutes.

It is a globally accessible domain name resolution service with built-in policy controls and reporting in Sophos Central. Backed by AI intelligence from SophosLabs, delivers real-time, global protection against high-risk domains. As soon as a malicious domain is discovered, it is shared between customers instantly, providing immediate protection for everyone. Using Sophos DNS Protection, you can prevent devices on your network from accessing domains linked to threats. Control access to unwanted websites based on your policies.

Offers quick and easy policy configuration in just a few clicks

 

Protection for networks

Sophos DNS resolver access is based on the source public IPv4 address of DNS queries. Therefore, protecting individual devices of remote workers moving from one network to another is not feasible at this time.