Sophos Endpoint Security & Data Protection Dokumentacja Pobierz pdf (Strona 18)

SOPHOS ENDPOINT SECURITY AND DATA PROTECTION REVIEWER’S GUIDE

There are a number of actions that can be taken when a data control rule is

matched:

• Allow ﬁle transfer and log event

• Allow transfer on acceptance by user and log event

• Block transfer and log event

By default, when a rule is matched and ﬁle transfer is blocked or user conﬁrmation

of ﬁle transfer is required, a message will be displayed on the endpoint computer’s

desktop. You can easily add your own custom messages to the standard messages

for user conﬁrmation of ﬁle transfer and for blocked ﬁle transfer.

The “authorize transfer on user acceptance” action can be used to train users

that the data they are transferring may contravene a company policy without

actually preventing them from carrying out their work. The end users decision is

audited and can be reviewed at a later date.

When a data control event occurs, for example, the copying of a ﬁle containing

sensitive data to a USB ﬂash drive, the event is sent to Enterprise Console and

can be viewed in the data control event viewer. The number of computers with

data control events over a speciﬁed threshold within the last seven days will also

be displayed on the dashboard.

Firewall policies

By default, Sophos Client Firewall is enabled for all computers in all groups and

blocks all non-essential trafﬁc. It is shipped with a set of secure default policies,

but you can easily change these to suit your particular business requirements.

Every aspect of the ﬁrewall conﬁguration can be centrally managed (please see

section 3 for more on Sophos Client Firewall).

The “alert only” mode allows you to deploy the ﬁrewall across your estate to collect

information on all applications that are used on the network. This information

will be sent back to the console and you can use this to build a policy that won’t

impact your users’ productivity, before you roll out a “live” policy.

Figure 12: Data control – End user authorization notiﬁcation

1 2 ... 13 14 15 16 17 18 19 20 21 22 23 ... 40 41

Brak uwag

Sophos Endpoint Security & Data Protection Dokumentacja Strona 18