Are backups encrypted?

Louis,

good question. Encrypting XG backup files is not yet supported natively. You can use a third-party tool to encrypt the file before sending it to another FTP server. Of course you need a bridge machine and use some script.

Regards

Ok, so just so I'm clear:

1. Backup files are not encrypted at all.
2. Transmitting backups to an FTP server is insecure because it does not use TLS.
3. Emailing backups is also insecure because it does not use TLS.

Is that correct?

Thanks.

Louis,

you can encrypt the file on your own using a third-party.

FTP is unsecure because credentials are transmitted in clear text. Same thing for SMTP.

Regards

I understand I can encrypt myself if I deploy a local FTP server and write a processing script to then push to our offsite FTP server. FTP over TLS is NOT insecure, of course, which is what should be supported. From what I can tell, without deploying ON SITE infrastructure (not ideal in many scenarios), there is NO way to do automated backups in a secure fashion.

This is ... surprising.

Louis

I understand I can encrypt myself if I deploy a local FTP server and write a processing script to then push to our offsite FTP server. FTP over TLS is NOT insecure, of course, which is what should be supported. From what I can tell, without deploying ON SITE infrastructure (not ideal in many scenarios), there is NO way to do automated backups in a secure fashion.

This is ... surprising.

Louis

I'm honestly surprised this hasn't been implemented yet.  

What about backups locally that are then transmitted to the Sophos cloud firewall?