Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

DLP Rolling Review: Sophos Endpoint Security

Rolling Review
Data Loss Prevention
Data-Loss Prevention Rolling Review Kick-Off

Vendors offer more options for protecting data throughout its travels. We'll put their claims to the test.

Reviewed so far:

DLP Rolling Review: RSA Takes Classification Up A Notch
The RSA Data Loss Prevention Suite sports a stellar user interface and an uncanny ability to sniff out sensitive data wherever it resides.

DLP Rolling Review: Safend Safeguards At The Endpoint
Safend estimates that 60% of corporate data resides on endpoints, and that's where Safend Protector Endpoint aims its DLP resources.

DLP Rolling Review: Code Green's DLP Appliance
The CI 1500 performed well in many areas and not so well in others.

DLP Rolling Review: Symantec's DLP-9
We tip our hats toSymantec for bringing to market almost everything we look for in a comprehensive data loss prevention suite via its DLP-9, formerly from Vontu.

DLP Rolling Review: TrendMicro Leakproof
Trend seems to have fully integrated Provilla's DLP technology into its core offerings.

DLP Rolling Review: Sophos Endpoint Security
Sophos has made strategic acquisitions in an attempt to round out its range of endpoint security capabilities.

DLP Rolling Review Wrap-Up
We've got interesting results and observations that will help you decide if DLP fits your risk management strategy, and if so, which vendors you should be talking to.

Sophos arrived in the  InformationWeek labs right as the train was departing the platform.  As an antivirus engine, Sophos is well known, but we set out to determine the quality of their data loss offerings. Like the other participants in our pool of DLP players, Sophos has made strategic acquisitions in an attempt to round out its range of endpoint security capabilities.  It appears as though they are on the right track. List price for a one year license for the Sophos agent starts at around $34 per user in the 500-999 user range.  

At first glance, the Sophos Endpoint Security and Data Protection agent looks similar to the Checkpoint Endpoint Security agent with respect to the amount of security features packed into a single client. While Checkpoint is still baking its endpoint DLP strategy in the oven, Sophos has started rolling some basic capabilities into the beta version of its new client sent in for review, version 9.0.

The Sophos Endpoint is the big-box store of endpoint security solutions, containing pretty much everything you need under one roof. The purchase of a single endpoint security and data protection license gets you antivirus, anti-malware, NAC, firewall, application, device, data control, full disk and file encryption. Would you like anything else with that order? 

Still, in our experience, only a handful of companies have proven they can do lots of things well, and while the Sophos data loss component of the endpoint agent is much improved, it still has some catching up to do when compared with other endpoint focused DLP vendors, like Safend and Trend Micro for example. 

Starting with the positives, the Sophos agent offers some options out of the box that even the largest DLP players do not, and that's a fairly robust device control to physical ports like USB, Firewire, IrD, parallel and application control capability, allowing administrators to control which application—and application components—are allowed to run.

  • 1