Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos InterceptX running on a server

We recently bought Sophos InterceptX and have installed it on all of the clients to protect them from threats. My question is this server is a file server and I don't know how the program would work on the server as it is hosting all of the files. Does anyone have any experience in this situation. The server is Microsoft Server 2012.



This thread was automatically locked due to age.
  • Hi Christian,

     

    Thanks for clearing that up - I wasn't entirely sure to what extent Intercept X went out to in terms of local and remote storage, but now I understand.

    Although, it does seem to side with my feelings that it would make sense to have on-access running on local storage for both servers and clients alike, rather than running on-access scans onto remote storage, taking up vital bandwidth.

     

    Still, I am waiting to see when (if?) Intercept X is available for servers - I have an "Update Cache" on a 2012R2 server with Sophos Protection installed, so I should see Intercept X when it becomes available - shouldn't I? ;)

     

    Regards,

    Stephen

  • Hi Christian

    what do you call a Sophos Official Document  and whichDatabase are you referring to? 

    These are the different factsheets.

    https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-server-protection-dsna.pdf?la=en

    https://www.sophos.com/de-de/medialibrary/PDFs/factsheets/sophos-server-protection-dsna.pdf?la=de-DE

    And the third Document is a Price calcualtor only available for Partners. But i think this is outdated because it´s from mid february

     

    Cryptoguard isn´t another name. It´s only a Module inside Intercept X. And this is also confusing me. Why is the  eXploit Prevention ( Intercept X without Root Cause Analysis) available for on premise and only Cryptoguard for Central?

    Unfortunately even resellers or partners might not be up-to-date

     

    That is the problem. The only information we got as a partner was that eXploit prevention is now available for on premise.  I think i will contact our Partnermanager to clarify the problems. Maybe he can bring light into the darkness :D.

     

     

  • Hello Stephen,

    [just to make sure, I'm not Sophos]
    rather than running on-access scans onto remote storage
    if bandwidth is indeed scarce and all potential sources are protected you could restrict scanning to local files (though this still leaves the risk that the remote machine is compromised or protection is inoperable). In an environment where workstations access other workstations and in addition users might disable AV I wouldn't recommend it.

    when (if?) Intercept X is available for servers
    not sure
    whether it requires a separate license (i.e. Intercept X for Server Protection) or not.

    Christian

  • Hello Ecrook,

    Cryptoguard [is] only a Module
    right. With another name I meant another name that comes into play (and thus adds to the confusion).

    Why is the eXploit Prevention available for on premise
    SESC (or SEC licensing) doesn't differentiate between server and non-server OS. IIRC initially the license permitted up to 10% servers, later 25%, and now there's no distinction (except for Japan) - but not all components run on servers (e.g. the Sophos Client Firewall).

    light into the darkness
    wouldn't be the first time, that licensing and prices change after a few weeks or months.

    Christian

  • It depends which kind of license do you have and which kind of protection by Interecept X do you want.

    Currently it is available the protection antiransomware (cryptoguard) if you use Cloud management and buy Central Server Protection Advanced.

    For on Premise managed Sophos enterprise Console, antiransomware protection is availaible for Server Protection Enteprise and there is an Add-on for

    Server Protection For Virtualization and Windows.
  • Hi,

    you can refer to the link below:

     

    https://community.sophos.com/kb/en-us/124890

     

    please check at your cloud on this

    ==> Threat Protection: Advanced Security, ransomeware protection enabled.

     

    *be careful with your setting, please do not disable any default setting, you might at risk for ransomware attack.

  • Kindly confirm intercept x server edition not yet release ?? Awaiting your reply

  • Hello,

    Central Server Advanced includes CryptoGuard for Windows Servers. We do not currently have the full Intercept X product available for Servers, it is something that we would like to offer. This will be after the next major update to the Intercept X product that is currently in early access (EAP) is released. 

    Stephen