Connect with us

GRTech

Sophos Unveils XGS Series Firewall Appliances With Industry-Best Transport Layer Security (TLS) Inspection

Published

on

Sophos, a global leader in next-generation cybersecurity, today unveiled new XGS Series firewall appliances with unrivaled performance and advanced protection against cyberattacks.

The new appliances feature industry-best Transport Layer Security (TLS) inspection, including native support for TLS 1.3, that is up to five times faster than other models available on the market today. 

“Sophos Firewall XGS Series appliances represent the most significant hardware upgrade that we have ever released and introduce unmatched detection, protection and speed,” said Dan Schiappa, chief product officer at Sophos.

“Security teams can no longer afford to overlook encrypted traffic for fear of breaking something or hurting performance – there’s too much at risk. We’ve completely redesigned the Sophos Firewall hardware to handle the modern encrypted internet. Security teams now have the ability to easily inspect encrypted traffic and shine light on what was once a black hole, and they can confidently do so without compromising on performance.” 

Cybercriminals Increasingly Using TLS to Avoid Detection

Sophos today also published new research, “Nearly Half of Malware Now Use TLS to Conceal Communications,” identifying a surge in cybercriminals using TLS in their attacks. The increasingly popular tactic is used by adversaries to encrypt and encapsulate the content of malicious communications to avoid detection as they carry out attacks. 

In fact, 45% of malware detected by Sophos from January through March 2021 used TLS to conceal malicious communications. That’s a staggering rise from the 23% Sophos reported in early 2020. Sophos has also seen an increase in the use of TLS to carry out ransomware attacks in the past year, particularly with manually-deployed ransomware. The majority of malicious TLS traffic that Sophos has detected includes initial-compromise malware, such as loaders, droppers and document-based installers like BazarLoader, GoDrop and ZLoader. 

“TLS has undoubtably changed the privacy of internet communications for the better, but for all the good it’s done, it’s also made it much easier for attackers to download and install malicious modules and exfiltrate stolen data – right under the noses of IT security teams and most security technologies,” said Schiappa.

“Attackers are taking advantage of TLS-protected web and cloud services for malware delivery and for command and control. Their initial compromise malware is simply the advance guard for major attacks, as they’re setting up camp for the heavy artillery that follows, like ransomware.”


Accelerating Threat Protection 
Powered by Sophos Firewall’s Xstream architecture, XGS Series appliances deliver the industry’s best zero-day threat protection, identifying and stopping the most advanced known and potential threats – including ransomware. Protection is fueled by powerful threat intelligence, available only through SophosLabs Intelix and based on petabytes of SophosLabs threat data. Suspicious files are safely detonated in SophosLabs Intelix virtual environments as well as subjected to in-depth static analysis for additional detection coverage and intelligence gathering. 

New Xstream flow processors within the appliances automatically accelerate trusted traffic, such as software as a service (SaaS), software-defined wide-area network (SD-WAN) and cloud applications, providing maximum headroom for traffic requiring TLS and deep packet inspection. 

This greatly reduces latency and improves overall performance for important business applications, particularly those using real-time data. 

The Xstream flow processors are software programmable, allowing Sophos to offload additional traffic in the future. The flexibility to enhance and adapt connectivity on the hardware itself further protects customers’ hardware investment.

Sophos provides unique and intuitive dashboard visibility of TLS traffic and inspection issues, and security administrators can add exceptions for problematic streams with one click. Performance is also optimized out of the box with an extensive set of rules that are updated and maintained by SophosLabs to exclude safe traffic from inspection. 


Sophos Firewall XGS Series appliances and firmware are easily managed on the cloud-based Sophos Central platform alongside Sophos’ entire portfolio of next-generation cybersecurity solutions. Solutions share threat intelligence and automatically respond to security incidents through Sophos’ unique synchronized securityapproach. Integration with Sophos Managed Threat Response (MTR) further boosts protection with human analysis for 24/7 fully managed threat detection and response. 

Availability

Sophos Firewall XGS Series desktop and most 1U rackmount appliances are available for immediate purchase exclusively through Sophos’ global channel of partners and managed service providers (MSPs). These models are ideally suited for small, medium and distributed organizations as an all-in-one network security solution with a strong price to performance ratio and diverse add-on connectivity options. 

Additional models designed for enterprise edge environments requiring maximum throughput for more complex network configurations will be available in the coming weeks. Simplified licensing includes bundled protection with enhanced support. 

What Analysts and Channel Partners Say
“Firewall appliances are evolving to secure newer use cases, including cloud and the sudden shift to a growing remote workforce,” said Frank Dickson, program vice president at IDC. “The elegance of Sophos Firewall’s Xstream dual processor architecture approach is its ability to accelerate trusted traffic from so-called ‘elephant flows’— large media streams, VoIP traffic and even cloud applications — to then leverage the general purpose CPU to perform appropriate resource-intensive processes, such as deep packet inspection and TLS inspection.

The result is an adaptable network appliance designed to provide protection while meeting changing and accelerating business demands across a variety of use cases.”

“The new XGS Series firewall appliances are screaming fast with rock solid, unbreakable stability. We captured an immediate increase in performance that doubled our throughput, which completely blew us away. Sophos Firewall has always been industry best, but the XGS Series appliances are revolutionary and beyond compare with cutting-edge innovation that’s years ahead of other offerings,” said Sam Heard, president at Data Integrity Services.

“Sophos Firewall provides the protection our customers need as they increasingly move business critical applications to the cloud and adopt zero trust technologies. It’s a win-win for channel partners, who further benefit with tremendous growth opportunities to cross and up-sell across the entire suite of Sophos solutions and services.”

“Sophos is raising the bar and pushing the cybersecurity industry forward at warp speed with its new XGS Series appliances, which are nothing short of amazing,” said Karen Greer, CEO at Secure Content Technologies. “Appliance installation is incredibly simple, and within minutes I could hear our technician yelling through the wall, ‘wow, this is fast!’ Sophos Firewall is effortlessly managed on Sophos Central, making it exponentially easier to secure and manage diverse and complex customer environments.

Knowing that Sophos Firewall automatically shares threat intelligence with other solutions on the platform through Sophos’ synchronized security heartbeat feature is game changing, giving us complete confidence and peace of mind that our customers are protected – even the most evasive threats don’t stand a chance at getting by.”

Continue Reading

GRTech

It’s Cybersecurity Awareness Month and Sophos has Some Tips for You!

In the mood of Cybersecurity Awareness Month, Christopher Budd, Director Sophos X-Ops, has compiled some tips for staying secure online.

Published

on

Christopher Budd - Sophos
Christopher Budd - Sophos
Sophos Cybersecurity Awareness Month
Sophos Cybersecurity Awareness Month

Cybersecurity Pro Tips:

  • Face Scans and Fingerprints are Safer Than Passcodes: Use features like Face ID or fingerprint scans for your devices as much as possible. These are safer than passcodes and devices have good built-in protections for this sensitive information.
  • Use Multi-Factor Authentication: Use multi-factor authentication (MFA) whenever possible. This gives an important extra layer of security that makes it harder for cybercriminals to access your accounts. If you can’t use something more secure like secure authenticator applications or physical hardware security keys, use your phone number — it’s safer than using nothing. If you use MFA for only one thing, use it for your email: that’s what attackers want the most.
  • Think Before You Share Publicly: Think twice before sharing any information publicly –cybercriminals can use it to access your accounts or to convince someone that they’re you.
    • Think about those cute surveys on Facebook with questions about your first car, city you were born in: these are the same kinds of info cybercriminals can use to pretend they’re you and log into and take over your accounts.
  • You Don’t Always Need (to keep)  the App: Don’t feel pressured to download an app every time: you can often use the service’s website just as well. Apps collect much more data than websites, including your location, your contact list and other info you might not want to share.If you do download an app, think about deleting it when you’re done using it: you can always reinstall it next time you need it.
  • Apps from app stores and websites that aren’t the official big names ones like Google Play, Apple’s App Store, Samsung’s Galaxy Store can be very risky. The official stores have security and privacy standards that can identify malicious activity. Always stick to official sources for downloading apps or, if they’re not on the official app stores, download the app from the developer’s official website or use the app’s web version.
  • Be On Your Guard for Unexpected Emails and Text Messages: Phishing continues to be one of the most effective tactics cybercriminals use to compromise consumers. If you get an unexpected email or text message, ignore it or at least don’t interact with it (don’t open attachments, don’t click on links). If you think it might be legitimate, reach out directly to who you think sent it and check with them.
  • Question Urgency in Emails and Calls: Cybercriminals use urgency to get you to let your guard down and make bad decisions. If someone contacts you saying they’re from a trusted organization like the IRS, police or your bank and need you to take action quickly or something bad will happen, stop and question it. Go to the trusted source like the number on the back of your credit card to independently validate the request.
  • Practice Good Password Security: Every account should have its own unique complex password. A strong password is at least 12 characters long with a mix of numbers, upper- and lower-case letters, and punctuation characters. Passwords should not be based on any personal information, and the best ones use a phrase rather than single words. If these passwords are too tough to juggle, try a password manager to stay organized.
  • Keep Everything Updated and Run Security Tools. Make sure all your apps and devices are always fully updated. Be sure to have some sort of security software on all of your phones and computers (even if you have a Mac).
  • Get Rid of End-of-Life Devices and Software: Everything from operating systems to services to Wi-Fi routers “go stale” and must be replaced eventually. For example, it might surprise you, but your internet router is typically only supported with patches and updates for a few years after you get it. Attackers love out-of-date devices. When something is “out of support” it’s stale: get rid of it and replace it with something fresh.
  • Back Up Your Data: While ransomware groups are mostly after businesses that can pay higher ransoms, they still go after people at home. It’s still important to have your data backed up so that you don’t have to consider paying a ransom.

Put Your Mind at Ease Regarding These Cybersecurity Concerns

Part of staying secure requires being able to filter out the noise and prioritize the security actions that matter. Here are things notto worry about. Focus your energy on real risks, not exaggerated threats.

  • Public Wi-Fi is Safer Than You Think: Contrary to outdated advice, public Wi-Fi is generally safe due to encryption used by most websites and apps. Use it freely at airports or coffee shops, but avoid sensitive activities.
  • Beware of Fearmongering Around New Tech Features: Not every new technology is as risky as it’s made out to be. For example, Apple’s NameDrop feature is generally safe and requires specific conditions to function. However, if you’re concerned, you can easily turn it off in settings.

Stop Stressing Over Public Chargers: The risk of “juice jacking” (data theft from public chargers) is extremely low. Don’t worry about using public phone chargers — just focus on real, more prevalent threats.

Continue Reading

GRTech

eSocialMint (eSM)) Wants to Disrupt Virtual Interactions

Reporter: Sandra Ani

Published

on

Unveiling of eSocialMint app

eSocialMint Inc., a tech startup based in Houston, is hoping to revolutionize social and professional events with its innovative new app.

Scheduled for launch in Nigeria at the end of the year, eSocialMint (eSM) offers a comprehensive platform that integrates features from popular apps like Facebook, TikTok, Zoom, WhatsApp, and Snapchat.

Designed to transform how events are conducted and experienced, eSM combines social media technology with advanced features such as virtual hologram technology.

Developed by IT architect Fisayo Olamigoke, eSM is available on both web and mobile devices. It offers a range of functionalities, including team events, social events, advertising, an eStore, and the unique “eSprayMe” feature.

This feature allows users to virtually spray money at events, replicating a popular Nigerian cultural practice while adhering to legal regulations.

Targeted at professionals, personal users, public institutions, and governmental bodies, eSM aims to save time and money by reducing the need for physical travel. With its cutting-edge technology and user-friendly interface, eSocialMint is poised to redefine the future of virtual interactions.

Continue Reading

GRTech

Blockchain, Tokenisation will Enhance Asset Management – DG NITDA

By Sandra Ani

Published

on

Tokenisation
DG NITDA Kashif Inuwa represented by the Director, e-Government and Digital Economy Development Department, Engr Salisu Kaka, delivering the keynote address at the Tokenized Economy 2024, Real-World Assets Tokenization conference

Kashifu Inuwa, the director general of the National Information Technology Development Agency (NITDA), has called for a concerted effort among industry players, government officials and experts to explore the transformative potential of Blockchain technology in asset management and economic development of the country.

The DG made this appeal at the Tokenised Economic Conference and Exhibitions themed; Tokenised Economy 2024; Real-World Assets Tokenisation, organised by Cyberchain in collaboration with the BAZE University and NITDA.

Recognising technology as an enabler for the nation’s GDP growth, the conference was a platform for industry professionals to share ideas and expertise in exploring opportunities in digital assets finance, capital markets, commodities, mortgage, bonds and real estate fractional ownership.

Giving his keynote address at the event, Inuwa outlined the benefits of tokenising physical and digital assets through Blockchain technology and emphasized its capacity to revolutionise asset management, exchange and security.

The DG who was represented at the event by the Director of e-Government and Digital Economy Development department, Engr. Salisu Kaka described tokenisation as converting traditional physical or digital assets into digital tokens recorded on a blockchain.

While explaining that tokens serve as digital representations of real assets, Inuwa mentioned that “when assets are tokenised, a Blockchain token is issued as a digital and legal representation of the real asset which allows assets to be sold, held and traded in a digital format, enhancing liquidity and accessibility.”

He further emphasised that the process of tokenisation involves choosing the asset to be tokenised, complying with legal and regulatory requirements, establishing secure custody solutions and blockchain networks and distributing tokens to potential investors through secure payment channels.

Laying reference to real estate investment markets which are plagued by inefficient transfer and record-keeping processes, Inuwa averred that tokenisation would mitigate the challenges by automating these processes.

“It offers several advantages over traditional real estate financing, such as automating processes, increasing liquidity, lowering investment barriers, and improving transparency. As a result, it is considered a promising development for the future of real estate markets,” he stated.

While stressing the need for Nigeria to position itself as the lead nation in the tokenised economy in Africa, he lauded the Lagos State’s plan to tokenise real estate and described it as a bold move that could set an example for other states to follow.

He added that tokenising other key sectors, including agriculture, oil and gas, securities, bonds and derivatives could further accelerate wealth creation and economic growth in the country.

Inuwa however noted that it was essential to establish a clear regulatory framework that would boost the confidence of investors as well as develop strong infrastructures that would support the tokenised economy.

He disclosed that since the launch of the National Blockchain Policy (NBP) and the inauguration of its steering committee, NITDA has been at the forefront of promoting the use of emerging technologies particularly blockchain technology by working closely with the blockchain ecosystem in promoting the adoption of the blockchain technology across all sectors of the country.

“Real-world asset tokenisation would offer a promising avenue for Nigeria to unlock its economic potential and improve the lives of its citizens. Nigeria has the potential to become a leader in the tokenised economy in Africa. By investing in infrastructure, education, and a supportive regulatory environment, Nigeria can unlock the full potential of tokenisation and drive economic growth.” he concluded.

In his remark, the Director General of the Securities and Exchange Commission (SEC), Dr. Emomotimi Agama spoke on how tokenisation breaks down traditional barriers and makes investments in areas like real estate and art accessible to a wider range of people, regardless of their financial status.

He stated that the shift would allow for the diversification of investments and would encourage more people to participate in previously exclusive markets.

Noting that tokenisation is a process that converts real-world assets into digital tokens, he said “Through tokenisation, these highly qualified assets become more accessible to a broader audience, democratizing wealth and enabling more inclusive financial participation.”

Continue Reading

Trending