1. Sophos Xg Atp Plus
2. Sophos Xg Test Atp
3. Sophos Xg Tap Mode
4. Sophos Xg Atp C2/generic-a

Overview

Sophos XG Firewall provides the world’s best network visibility, protection, and response to secure your Azure environments. Integrate multiple, leading security technologies into a single, preconfigured virtual-machine image with extensive reporting, including full insight into user and network activity. Advanced threat protection Advanced threat protection analyzes incoming and outgoing network traffic for threats. Using ATP, you can quickly detect compromised clients in your network and log or drop the traffic from those devices. Advanced threat protection Advanced threat protection analyzes incoming and outgoing network traffic (for example, DNS requests, HTTP requests, and IP packets) for threats. Using ATP, you can quickly detect compromised clients in your network and raise an alert or drop the traffic from those clients.

Sophos XG Firewall: How to bypass a particular firewall rule for Application Classification and ATP KB-000038900 01 24, 2020 2 people found this article helpful.

The threat landscape continues to evolve as bad actors engage in targeted and sophisticated tactics, techniques and procedures with common tools and proven attacks

Sophos Xg Atp Plus

SophosLabs observed several advanced trends, which we believe will play a significant role in new cyber-attacks: from the continued adoption of manual attack techniques by ransomware gangs, the steady increase in malicious deployment of cryptocurrency miners, to mobile platform and growing IoT exploits

SophosLabs’ threat research team and highly automated infrastructure utilizing next-generation tools, has developed high-accuracy, distinctive and often exclusive data sets that are now available commercially and can help improve detection and response capabilities

How to configure

• Login to Sophos XG by Admin account
• PROTECT -> Advanced threat -> Advanced threat protection
• To turn on advanced threat protection -> Click the on/off switch
• To specify an action when ATP detects a threat -> Select Log only to log the data packet or Log and drop to log and drop the packet
• To specify known hosts that you want to ignored by ATP -> Click Add new item and select hosts
• To add destination IP address or domain names that you want to skip from being scanned for threat by ATP -> Enter an address -> Click +

• To edit log settings -> Click Change log settings

Sophos Xg Test Atp

• Edit components which you want

-> Click Apply

• In tab Sandstorm settings, we will configure which files will be sent to Sophos Sandstorm to check file safety
• If files safety, it will accept go into the network
• If files unsafety, it will be block

Sophos Xg Tap Mode

-> Click Apply

Sophos Xg Atp C2/generic-a