1. D A T A S H E E T
Security Health Check Plus
For Sophos Products
Sophos Endpoint – Email – Web – Encryption – NSG/UTM – Mobile Control
WHAT IS A FOURSYS
SECURITY
HEALTH CHECK?
A Foursys Security Health Check is a
detailed assessment of the Sophos
product used on the network. How it is
currently configured and how it could be
configured to optimise network security
with best practice recommendations; all
delivered using the experience of our
Sophos trained Security Consultants.
Time permitting, Foursys Security
Consultants will also assist with the
implementation of these recommendations
(including full product upgrades, if that
forms part of the recommendation), while
ensuring customer involvement throughout
the whole process.
Foursys will provide a detailed site visit
report following the Security Health Check
service, with an analysis of the present
situation, work undertaken and prioritised
recommendations.
All work is backed by our Professional
Services Guarantee (see over).
WHAT IS SECURITY
HEALTH CHECK PLUS?
Foursys will also provide priority technical
support for Sophos Endpoint (and Email
if needed) including Remote Support
using Webex when needed. Up to 12
support tickets are included per year at
no extra charge within Security Health
Check Plus.
WHY SHOULD YOU
HAVE A FOURSYS
SECURITY HEALTH
CHECK?
Because Anti-Virus is not enough to
prevent malware infection.
Today’s threats can spread through open
shares, unpatched workstations and
removable media. That means a Client
Firewall, Device Control and Application
Control are required to prevent modern
malware threats spreading through a
network. Some virus infections are not
stopped or even contained by an Anti-Virus
product alone.
Sophos produces an Endpoint Protection
Solution to protect against these very
threats and Foursys has the expertise to
help an organisation implement these
controls quickly and easily.
Below are some of the security and data
protection capabilities that can be
deployed either during or following a
Health Check. Note that some facilities are
not included in all Endpoint licences.
Contact Foursys if you are not sure or to
discuss an upgrade.
• HIPS – Updated pre-execution analysis
prevents files that have suspicious
behavioural characteristics from running.
Optionally enabled cloud-based lookups
further enhance accuracy and
detection rates.
• Application Control – Block
unauthorised applications from executing
on the network. Prevent P2P applications
downloading malware or Instant
Messaging bypassing email controls. All
application controls can be configured in
an initial monitor only mode.
• Device Control – Take control of
Removable media like USB sticks and
CDs. Prevent malware from reaching
desktops and data loss leaving them.
Monitor devices attached to any Sophos
protected desktop, then lock down their
use with flexible policies that can give
complete control (even down to the
serial number of the device attached).
• Client Firewall – Malware can spread
through network shares exploiting
weaknesses in the client configuration.
The Sophos Client Firewall gives control
over network shares and network

2. Tel: 01223 810 910
Fax: 01223 810 912
Email: enquiries@foursys.co.uk
Foursys Ltd, 2 Stow Court, Stow Road,
Quy, Cambridge CB25 9AS
© Foursys Limited 2011. All rights reserved.
www.foursys.co.uk
D A T A S H E E T
Security Health Check Plus For Sophos Products
programs/ports, allowing access to
required resources whilst securing
endpoints from attack.
• Web Browsing Security – Help
prevent users downloading viruses from
known malware sites by utilising Sophos
Live Protection which is now standard
within Endpoint. Additional web security
including policy control and reporting is
available using an optional Endpoint Web
Filter or the full Web Protection Licence,
and a virtual or physical appliance.
• Data Leakage – Over 50 content lists of
data types such as credit card numbers
are available to monitor and if you wish,
control data leaving your organisation
from the desktop through email, web, IM,
removable media etc). Simple but
effective data leakage and control.
• Exchange server – Endpoint licences
now include Sophos PureMessage for
Exchange to protect email servers from
malware and undesirable content.
• Full Disk Encryption – Protect data on
laptops or desktops with an easy to use
full disk encryption product.
• Tamper Protection – Prevent Endpoint
removal or configuration change through
password protected policies.
• Sophos Patch – Now included in
Endpoint this provides security
oriented patch assessment and in a
later release patch remediation.
Microsoft, Adobe and 13 other vendors
patches are prioritised based on security
risk with all management and reporting
available under the Sophos
Endpoint console.
You may want to use just some of these
facilities, but advice on which is most
suitable and how they could be
implemented will be a vital factor in
improving your security using
Foursys expertise.
WHY FOURSYS?
Foursys has over 900 Sophos customers
with over 1.3million licensed users, and has
been recognised as the top Sophos UK
partner for the last 9 years. All Foursys
services are covered by our “Professional
Services Guarantee” of complete
satisfaction with our work.
WHAT SECURITY
HEALTH CHECKS
ARE AVAILABLE?
• Sophos Endpoint - the most widely
used Health Check Service detailed here.
• Sophos Email/Web - An add-on to
the Endpoint Health Check for those
with Sophos PureMessage, Sophos
Email or Web.
• Sophos Encryption - Including Disk
Encryption, Removable Media and other
Encryption modules.
• Websense Web & Email Security –
Recommendations around deployment,
configuration, patching, alerting or
upgrading of Websense products in line
with security best practice.
All Security Health Checks can be ordered
as an annual service from 1 up to 5 years
so you can fix the costs of a Foursys
Health Check at current prices.
One day onsite (or longer if more products)
Clear written report with prioritised recommendations
Initial scoping and overview of how Sophos product is installed at
customer site(s)
Check status of server configuration (and client if applicable)
Review version level, check rules/policies against best practice and directory
integration and discuss recommendations with customer
Priority Technical Support (9-5, Monday to Friday) – 10 tickets included per year
Remote Technical Support included as well as Telephone/Email Support
*Upgrade server (and client) to latest version
*Investigate customer specific issues
*Knowledge transfer on new features to enable their continued use
*Note: depending on size and complexity of site this work may not be
completed on the day or require additional day(s) to be implemented
by the customer and/or Foursys
Foursys Security Health Check Sophos
Endpoint– what is included
Foursys Professional
Services Guarantee
If you are not satisfied, or if
circumstances outside our control
prevent the services work being
completed, then a Foursys engineer
will return at no extra charge to
complete the work required or the
cost of the work will be refunded.
Foursys professional services and
training courses are provided by
certified engineers with practical
experience in the products involved.