Sophos Utm Web Protection



Created Date: 3:47:12 PM. By default, web protection is enabled: access to malicious websites is blocked, downloaded content is scanned and the reputation of downloaded files is checked. For more information about the web protection settings and how to change them, see Configure Sophos Web Protection.

Note: Sophos UTM allows multiple Virtual Webservers using HTTPS, and the same interface and port, to each use different a certificate. With support for Server Name Indication (SNI), Webserver Protection will present the correct server to each client, based on the requested hostname.

Sophos Web Protection provides enhanced protection against web threats. It includes the following features:

Sophos utm web protection app
  • Live URL filtering
  • Scanning of downloaded content
  • Checking of the reputation of downloaded files
Sophos

Live URL filtering

Live URL filtering blocks access to websites that are known to host malware. This feature works by performing a real-time lookup against Sophos's online database of infected websites.

When access to a malicious website is blocked, the event is recorded in the scanning log. For information about viewing the scanning log, see View the scanning log.

Content scanning

Content scanning scans data and files downloaded from the internet (or intranet) and proactively detects malicious content. This feature scans content hosted at any location, including locations not listed in the database of infected websites.

Download reputation

Download reputation is calculated based on the file's age, source, prevalence, deep content analysis and other characteristics.

Note Download reputation is supported only on Windows 7 and later.

By default, an alert will be displayed when a file with low or unknown reputation is downloaded. We recommend that you do not download such files. If you trust the file's source and publisher, you can choose to download the file. Your action and the file's URL will be recorded in the scanning log.

Note Download reputation is calculated based on the data in the SophosLabs' in-the-cloud database and requires Sophos Live Protection to be enabled in order to perform lookups and obtain the data. (By default, Sophos Live Protection is enabled.)
Gateway

For more information about download reputation, see knowledgebase article 121319.

Sophos Utm Web Protection Download

Web protection configuration settings

By default, web protection is enabled: access to malicious websites is blocked, downloaded content is scanned and the reputation of downloaded files is checked.

Sophos Utm Web Protection

Sophos Utm Web Protection Pro

For more information about the web protection settings and how to change them, see Configure Sophos Web Protection.

Supported web browsers

Web protection is supported on the following web browsers:

  • Internet Explorer
  • Edge
  • Google Chrome
  • Firefox (except for download reputation)
  • Safari (except for download reputation)
  • Opera

Sophos Utm Web Protection Free

Web content accessed via an unsupported browser is not filtered and will not be blocked.