Sophos 36M Web Protection Firewall 1 license(s)

Ensures safe and productive web use
Our Secure Web Gateway prevents malware infections and gives you control over your employees’ web use. Spyware and viruses are stopped before they can enter the network. And, you can quickly create policies that set where and how employees spend time online.

Proven protection against web threats
We block the latest web threats using advanced techniques like JavaScript emulation and Live Protection cloud lookups to detect malicious web code before it reaches the browser. It also prevents infected systems from calling home with sensitive data. Our engine inspects all HTTP, HTTPS and FTP traffic, including active content like Active X, Flash, cookies, VBScript, Java and JavaScript.

Customizable URL Filtering boosts productivity
Our continuously updated database contains over 35 million sites in 96 categories. This lets you quickly and easily create safe web browsing policies, minimizing legal concerns around inappropriate content and maximize productivity. Set up policy by user or group using a variety of authentication options including IP Address, eDirectory SSO, LDAP and Active Directory SSO (even in transparent mode).

Control apps—block Facebook, accelerate Salesforce
You get complete control to block, allow, shape and prioritize web applications with Deep Layer-7 inspection (Next-Generation Firewall). It identifies over 1300 applications, and you’ll get feedback on unclassified applications too.

Dynamic reports provide unrivalled insight
You get detailed reports as standard, stored locally with no separate tools required. Predefined and customizable reports show key web activity like domains visited and bandwidth consumed. At-a-glance flow graphs show usage trends by IP address or user name. And report anonymization hides user names, requiring the four-eyes-principle to unhide them.

HTTPS scanning
No one offers more choice when it comes to scanning encrypted traffic. And no one makes it as easy as Sophos. Choose from three HTTPS scanning modes:
- Complete decryption and re-encryption in the UTM with a full scan of all traffic provides the ultimate in security
- Targeted HTTPS scanning decrypts, scans, and re- encrypts traffic for selected sites and categories, offering a great blend of security and performance
- URL Filtering does not decrypt any HTTPS traffic but still enforces browsing policies over HTTPS traffic, providing a good balance of security and privacy

No matter which option you choose, you prevent tunneling over HTTPS with anonymizing proxies. And, you automatically validate certificates, taking the decision as to which sites to trust away from users.