Sophos Endpoint
Prevent Breaches, Ransomware, and Data Loss
Sophos Intercept X delivers unparalleled protection against advanced
attacks. It employs an extensive suite of sophisticated technologies to stop
the broadest range of threats before they impact your systems. Powerful EDR
and XDR tools enable your organization to hunt for, investigate, and respondto suspicious activity and indicators of attack.

Prevention-First Approach

Highlights

Intercept X takes a comprehensive approach to endpoint protection without relying on
one security technique. Web, application, and peripheral controls reduce your attack
surface and block common attack vectors. AI, behavioral analysis, anti-ransomware, antiexploitation, and other state-of-the-art technologies stop threats before they escalate.
This means resource-stretched IT teams have fewer incidents to investigate and resolve.

Ì Stops never-before-seen
threats with deep learning AI

Context-Sensitive Defenses

Ì Prevents the exploit
techniques and malicious
behaviors used throughout
the attack chain

These additional dynamic defenses represent industry-first initiatives. They provide
automated protection that adapts to the context of an attack. This removes the attacker’s
ability to operate, disrupting and containing the attack while buying valuable time torespond.

Easy to Set Up and Manage
Sophos Central is a cloud-based management platform for managing all of your Sophos
products. Our recommended protection technologies are enabled by default, ensuring
you immediately have the strongest protection settings with no tuning required. Granular
control is also available. The Account Health Check identifies security posture drift andhigh-risk misconfigurations, enabling administrators to remediate issues with one click.

Synchronized Security
Intercept X shares status and health information with Sophos Firewall, Sophos ZTNA,
and other products to provide additional visibility into threats and application usage.
Synchronized Security will automatically isolate compromised devices while cleanup is
performed and then return network access once the threat is neutralized — all without
administrator intervention.

Ì Blocks ransomware
and rolls back affected
files to a safe stateÌ Automatically adapts
defenses to changing
attacker behavior
Ì Reduces the attack
surface with app, device,
and web controlÌ Identifies security
posture drift and high-risk
misconfigurations with
one-click remediation
Ì Supports threat hunting
and IT ops security
hygiene with EDR/XDRÌ Provides 24/7/365
security delivered as afully managed service
Ì Easy to deploy, configure,and maintain, even inremote work environments

Sophos Endpoint

Block Ransomware

Prevent Exploits

Intercept X includes CryptoGuard, an advanced antiransomware technology that stops new variants or neverbefore-seen ransomware. CryptoGuard inspects the contentsof files to detect encryption and ransomware running on yournetwork. Files encrypted by ransomware will be automaticallyrolled back to a safe state, irrespective of size or file type,minimizing the impact on business productivity.

Anti-exploitation technology stops the techniques that
attackers rely on to compromise devices, steal credentials,
and distribute malware. Sophos deploys novel on-device antiexploitation approaches at scale for all applications. Straightout of the box, Intercept X builds on the basic protection
available in Microsoft Windows, adding no fewer than 60
proprietary, pre-configured, and tuned exploit mitigations.
Intercept X protects against fileless attacks and zero-day
exploits by stopping the techniques used throughout theattack chain.

Extended Detection and Response(XDR)
Powerful EDR/XDR functionality enables you to hunt for,investigate, and respond to suspicious activity across Sophos
and third-party security controls. Threat hunt across theSophos Data Lake or pivot to a device for real-time data andup to 90 days of historical data. Get a holistic view of yourorganization’s environment enriched with Sophos X-Ops
threat intelligence for threat detection, investigation, andresponse designed for dedicated SOC teams and IT admins.

Managed Detection and Response(MDR)
Sophos MDR is a fully managed threat hunting, detection,and incident response service that integrates with Sophos
and third-party security controls, providing a dedicated 24/7
security team to detect and neutralize the most sophisticatedand complex threats.

Licensing Overview
FeaturesIntercept X Advanced

Next-Gen Threat Protection
Web protection, deep learning anti-malware

Malicious Activity Blocking and Context-Sensitive Defenses
Anti-ransomware protection, anti-exploitation technology, Adaptive Attack Protection

Threat Exposure Reduction
Web control, peripheral control, application control, DLP, Account Health Check

Detection and Response (EDR/XDR)
Suspicious activity detection, threat hunting, investigation tools, response actions

Intercept X Advanced Intercept X Advancedwith XDR
with MDR Complete✔

✔

✔

✔

✔

✔

✔

✔

✔

✔

✔

Managed Detection and Response✔

Fully managed 24/7 threat hunting, detection, and incident response

Try it now for free
Register for a free 30-day evaluation atsophos.com/intercept-x

United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com© Copyright 2023. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK
Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned aretrademarks or registered trademarks of their respective owners.
23-09-07 DS-EN (DD)

Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au

Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com