适合谁
Companies with 30-300 PCs, no in-house security team, and a need for someone to watch ransomware alerts overnight.
概述
Sophos today
Sophos is a British company headquartered in Abingdon, near Oxford, and has been owned by the investment firm Thoma Bravo since 2020. In February 2025 it completed the purchase of Secureworks and its Taegis XDR platform, which made Sophos one of the largest providers of MDR (24/7 managed detection and response) in the world.
How the product families fit together
- Sophos Firewall runs on XGS Series hardware: second-generation desktop models (XGS 88 to 138, with 2.5 GbE ports and an optional 5G module on some) for branches and small offices, and 1U and 2U models for head offices. The current firmware is SFOS v22, released at the end of 2025.
- Intercept X protects PCs and servers, including CryptoGuard anti-ransomware that rolls back files that were encrypted.
- Sophos MDR and Sophos XDR: either Sophos analysts watch and respond for you, or your own team does it with the same tools.
- Sophos Email, Sophos ZTNA, and Sophos switches and access points are managed from the same place.
Everything lives in Sophos Central, a cloud management console.
Why they work best together
When both the firewall and Intercept X come from Sophos, an infected PC is isolated from the network automatically (Synchronized Security and Active Threat Response) until it is cleaned. For organizations with nobody watching a screen at night, that is the main benefit.
Licensing is by annual subscription. Firewalls are sold with bundles such as Xstream Protection; endpoint and MDR are priced per user or device. Sophos fits best at companies with 30 to 300 PCs and no security team of their own.
优势
- With the firewall and Intercept X together, an infected machine is cut off from the network on its own, without waiting for someone to click a button.
- Sophos MDR puts analysts on watch 24/7 who can act on an incident immediately, which suits organizations with one or two IT staff.
- Firewall, endpoint, email, switches and Wi-Fi are all managed from Sophos Central, with no management server to install.
- The new XGS desktop models have 2.5 GbE ports and some take a 5G module, useful as a backup link at branches with a single fiber line.
选型前须知
- Many of the benefits only appear when Sophos supplies both the firewall and the endpoint protection. Use just one and the main selling point disappears.
- Everything is an annual subscription and management depends on Sophos Central in the cloud. It is a poor fit if your organization needs fully offline systems.
- Older XG appliances and some first-generation XGS models have reached end of sale or end of life. Check the dates before renewing a licence on old hardware.
- Sophos access points (AP6 series) are Wi-Fi 6 and 6E, with no Wi-Fi 7 model yet and fewer options than specialist Wi-Fi brands. For hotels or large halls, use a dedicated Wi-Fi vendor.
在老挝的使用
Sophos matches the shape of many Lao organizations: 50 to 200 PCs, one or two IT staff, and nobody watching the systems at night. Ransomware tends to start on a Friday night or during a holiday, which is why MDR is the part that really earns its keep.
What we see on sites:
- Purchasing: XGS hardware and licences are ordered through distributors in Thailand. Licences activate the same day; hardware that is not in stock can take several weeks.
- Power: desktop models run on an external adapter. Always use a UPS and surge protection.
- Internet: Sophos Central and MDR need internet access. Branches with frequent outages should have a 4G/5G backup link.
- Language: the MDR team works in English. Someone in your organization must be able to take the call and make decisions during an incident.
Good fits: mid-sized private companies, hotels, private hospitals, international schools and multi-branch retail.
与其他方案对比
Fortinet is the better pick if SD-WAN and VPN across many branches matter most and you want high performance for the money. WatchGuard is a close alternative for small businesses, especially when you want MFA (AuthPoint) on VPN logins. If you only need light antivirus for older PCs and don't care about a matching firewall, ESET is enough. Choose Sophos when you want firewall, endpoint and a 24/7 monitoring team from one vendor.
产品线
- Sophos Firewall
- Sophos Intercept X
- Sophos MDR
- Sophos XDR
- Sophos Email
- Sophos ZTNA
- Sophos Central
使用此品牌的解决方案
下一代防火墙 (NGFW)可识别应用和用户的防火墙，具备 IPS、网页过滤、HTTPS 检测和 VPN，按全功能开启的实际性能选型。
终端防护与 EDREDR 监控行为而不只依赖病毒库，可在勒索软件运行中途拦截，并立即将中毒电脑隔离出网络。
邮件安全通过过滤、SPF/DKIM/DMARC 和沙箱，拦截钓鱼邮件、冒充老板或供应商的诈骗邮件 (BEC) 及恶意附件。
安全远程访问 (VPN/ZTNA)员工和外包人员通过 VPN 或 ZTNA 加 MFA 随时随地访问内部系统，只能看到所需内容。
SOC 与 SIEM 安全监控防火墙、服务器和终端日志汇入同一 SIEM，有专人盯告警，出事时有清晰的处置预案。
分支机构 SD-WAN外省分支同时使用两条互联网线路，一条故障另一条数秒内接管，全程加密。
安全意识培训用老挝语、泰语和英语培训员工，案例来自他们日常所见，并通过模拟钓鱼衡量实际改进。
企业版 Microsoft 365正版 Exchange 邮箱、Teams、OneDrive 和 Office，开通当天即启用 MFA、Intune 与 Defender，而不是等出事后才补。
企业邮箱与域名以贵公司名义注册域名（.la、.com），企业邮箱配置 SPF、DKIM 和 DMARC，邮件可送达收件箱且无法被冒充。
DDoS 防护与 Web 应用防火墙 (WAF)为老挝的网站、预订页面、API 和 VPN 门户提供 WAF 与 DDoS 防护，含策略调优和持续监控。常见问题
What does Sophos MDR actually do when something happens at night?
Sophos analysts investigate the alert and, within the authority you give them, can isolate a machine, kill a process or remove malicious files straight away, then tell you what they did. Before you start, agree how far they may act on their own and who they should call.
We already have another brand of firewall. Can we use just Intercept X?
Yes. Intercept X and MDR work without a Sophos firewall, and MDR can take logs from many other firewall brands. What you miss is the automatic network isolation enforced by the firewall.
We still run an older Sophos XG. Should we replace it?
Check that model's end-of-life date first. Many XG Series appliances are already past end of support and no longer get new firmware. If you would be renewing for several more years, moving to XGS is usually better value, and most of the configuration can be exported and imported.
所有品牌名称和商标归其各自所有者所有。除非另有明确说明，提及某品牌并不代表与其存在合作关系。产品均通过正规分销渠道采购。
发给我们建筑平面图或几张现场照片
我们会先询问一些细节，再给出初步设计方案。首次咨询免费，可用老挝语、泰语或英语，通过 WhatsApp 或 Facebook 主页联系。