Sophos Endpoint Comparison

Cloud vs. On-premise

On-Premise Managed Cloud-Managed

Endpoint Endpoint Sophos Cloud Sophos Cloud Sophos Cloud

Features
Protection Protection Endpoint Endpoint EndUser
Standard Advanced Protection Protection Protection
Standard Advanced
Unified Management Manage endpoint, mobile, and web protection from a single console

User-based policy and reporting Apply policies that follow users across devices and platforms; view
devices, policies, and events by user.
Anti-malware & HIPS Block and remove viruses, Trojans, Adware, spyware and more

Live Protection Real-time protection for zero-day threats powered by SophosLabs

Web Security Block access to malicious or infected websites and stop malicious code
from downloading and accessing computers

Next-gen endpoint protection Protect against advanced threats with correlated behavioral analytics, limited limited
reputation, malicious traffic detection and exploit prevention.
New Web Control/Web Filtering Block sites based on content categories and enforce policy for users both Windows & Mac Windows & Mac -- Windows & Mac Windows & Mac
on or off the network

Number of categories available to block via web control 14 14 -- 54 54

(54 when
managed by
Web Appliance)
Time-based policy When managed --
by Web
Appliance
Device Control Monitor and control the use of removable media, USB drives and Windows only Windows only -- Windows & Mac Windows & Mac
wireless networks
Application Control Block the execution of applications by name or category like file sharing
or instant messaging
Data Control/DLP Create and enforce data loss prevention rules using pre-built data
taxonomy libraries
Client Firewall Stop hackers from gaining access to users computers
Integrated Mobile device management Manage mobile devices (smart phones and tablets) from one unified iOS & Android
management console
Centralized Management Centralized management console manages, reports on, and controls SEC SEC Cloud-based Cloud-based Cloud-based
computers running Sophos. Cloud based security does not require a No server No server No server
management server. required required required
Web-based Managed Console Access management console from any computer with a browser
 Sophos Endpoint Comparison
Cloud vs. On-premise
Role-based Administration Delegate specific administrative tasks to users and restrict access to Coming soon Coming soon Coming soon
unauthorized functions.
Automatic update, upgrade and policy Automatically update software and refresh policies in real time. Does
refresh not require users to be connected to the corporate network
Deployment Automate the deployment process with an Active Directory script or Mac
command-line.
New Active Directory Sync Automatically synchronize with Active Directory for deployment and on-
going user/group management
PureMessage for Exchange Prevents spam and malicious attachments on Microsoft Exchange
servers.
Platforms One license per user protects the user on multiple devices across Windows, Mac, Windows, Mac, Windows & Mac Windows & Mac Windows, Mac
platforms Linux; ; OS & Android
NetApp, EMC,
Oracle/Sun
storage

Note: For customers looking for endpoint protection and mobility management, Sophos also offers EndUser Protection bundle that combines Sophos Endpoint Advanced with Sophos Mobile Control in one
SKU.