Network Security & Firewalls

The Core M2700 Series large-scale deployment appliance provides a tightly-integrated solution comprised of a standardized appliance with the resources necessary for larger deployments and dedicated QA certification of all MobileIron Core functionality. The following table lists the M2700 appliance specifications.

Branch offices, mid-sized organizations, and small data centers can connect directly to the cloud easily and affordably with the Forcepoint NGFW 1100 Series. It integrates full SD-WAN connectivity and strong security in a compact, 1U rack-mounted appliance that's managed at enterprise scale from Forcepoint's renowned Security Management Console (SMC).

Direct-to-cloud connectivity and security for digital transformation

Digital transformation is all about connecting distributed workforces to the resources they need, no matter where they are. With applications and data moving to the cloud, organizations are increasingly finding that old "hub-and-spoke" networking technologies such as MPLS can no longer handle the load.

The Forcepoint NGFW 1100 Series provides the networking and security needed to safely connect mid-sized offices or small data centers directly to the Internet for maximum performance and productivity using the cloud. The 1100 Series' modular interfaces allow organizations to tailor the appliance to their exact connectivity needs.

Reduced costs and footprint with integrated SD-WAN and NGFW

The Forcepoint NGFW 1100 Series unites networking and security in a modular and space efficient IU rackmount appliance. It integrates multi-ISP SD-WAN connectivity, site-tosite Multi-Link ™ VPN and high-availability clusteringwith the industry's strongest next generation firewall (NGFW) and intrusion prevention (IPS) security.

It is centrally administered using the same Forcepoint Security Management Center (SMC) that controls up to 2000 physical, virtual and cloud applicances from a single pane of glass. With zero-touch deployment. Forcepoint NGFW devices throughout the world can be deployed quickly, without an on-site technician, and SMC enables access and security policies can be updated with just a few clicks.

Advanced clustering for high availability

Downtime is not an option for many organizations. That's why the Forcepoint NGFW 1100 Series offers advanced clustering that allows multiple appliances (including other Forcepoint NGFW models) to be used together to keep branch networks running even in the middle of firmware updates or hardware failure.. Built-in SD-WAN traffic management enables links from more than one ISP to be used at the same time to further reduce the chance of outages.

Enterprise offices and small data centers requiring enhanced performance and scalability can connect directly to the cloud with the Forcepoint NGFW 2100 Series. It integrates full SD-WAN connectivity and strong security in a compact, 1U rack-mounted appliance that's managed at enterprise scale from Forcepoint's renowned Security Management Console (SMC).

Direct-to-cloud connectivity and security for digital transformation

Digital transformation is all about connecting distributed workforces to the resources they need, no matter where they are. With applications and data moving to the cloud, organizations are increasingly finding that old "hub-andspoke" networking technologies such as MPLS can no longer handle the load.

The Forcepoint NGFW 2100 Series provides the networking and security needed to safely connect enterprise offices or small data centers directly to the Internet for maximum performance and productivity using the cloud. The 2100 Series' modular interfaces offer up to ten 10-gigabit Ethernet ports and up to four 40-gigabit Ethernet ports, allowing organizations to tailor the appliance to their exact connectivity needs.

Reduced costs and footprint with integrated SD-WAN and NGFW

The Forcepoint NGFW 2100 Series unites networking and security in a modular and space efficient 1U rackmount appliance. It integrates multi-ISP SD-WAN connectivity, site-to-site Multi-Link™ VPN and high-availability clustering with the industry's strongest next-generation firewall (NGFW) and intrusion prevention (IPS) security.

It is centrally administered using the same Forcepoint Security Management Center (SMC) that controls up to 2000 physical, virtual and cloud appliances from a single pane of glass. With zero-touch deployment, Forcepoint NGFW devices throughout the world can be deployed quickly, without an on-site technician, and SMC enables access and security policies can be updated with just a few clicks.

Advanced clustering for high availability

Downtime is not an option for many organizations. That's why the Forcepoint NGFW 2100 Series offers advanced clustering that allows multiple appliances (including other Forcepoint NGFW models) to be used together to keep branch networks running even in the middle of firmware updates or hardware failure. Built-in SD-WAN traffic management enables links from more than one ISP to be used at the same time to further reduce the chance of outages.

Powerful Protection and Performance

Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection.

Powerful Protection and Performance

The Sophos Firewall Xstream architecture is engineered to deliver extreme levels of visibility, protection, and performance to help address some of the greatest challenges facing network administrators today.

TLS 1.3 Inspection
According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organizations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience.

Sophos Firewall removes the blind spots caused by encrypted traffic by allowing you to use SSL inspection while maintaining performance efficiency.

Deep Packet Inspection
We believe you should never have to decide between security and performance. Sophos Firewall includes a highspeed deep packet inspection (DPI) engine to scan your traffic for threats without a proxy slowing down the process. The firewall stack can completely offload the processing to the DPI engine, significantly reducing latency and so improving overall efficiency.

Sophos Firewall blocks the latest ransomware and breaches with high-performance streaming DPI including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

Application Acceleration
A significant portion of your network traffic is important business application traffic destined for branch offices, remote users, or cloud application servers. This trusted traffic, which needs no additional security scanning for threats or malware, can be intelligently directed to the FastPath, reducing latency, and optimizing overall performance. This provides added capacity and headroom for traffic that does need deep packet inspection.

Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies - putting them on the FastPath through the new Xstream Flow Processors.

Sophos Central

Sophos Central is at the heart of everything we do. Our cloud management platform provides a single pane of glass to not only manage your firewalls, but also your full portfolio of Sophos security solutions.

Simply manage multiple firewalls
Sophos Central is the ultimate cloud management platform for all your Sophos products. It makes day-to-day setup, monitoring, and management of your Sophos Firewall easy. It also provides helpful features such as alerting, backup management, one-click firmware updates and rapid provisioning of new firewalls.

• Manage all your Sophos Firewalls and other Sophos products from a single console
• Configure changes and apply them to a group of firewalls or manage each firewall individually
• Create a backup schedule and store up to five backups in the cloud
• Schedule firmware updates across your entire network with just a few clicks

Powerful Protection and Performance

Sophos Firewall and the XGS Series appliances with dedicated Xstream Flow Processors enable the ultimate in application acceleration, high-performance TLS inspection, and powerful threat protection.

Powerful Protection and Performance

The Sophos Firewall Xstream architecture is engineered to deliver extreme levels of visibility, protection, and performance to help address some of the greatest challenges facing network administrators today.

TLS 1.3 Inspection
According to the latest statistics, approximately 90% of web traffic is encrypted, making it invisible to most firewalls. An increasing amount of malware and potentially unwanted apps exploit the fact that organizations are simply not using SSL inspection. Network administrators' main fears are that SSL inspection will have a performance impact or cause something to break, impacting the user experience.

Sophos Firewall removes the blind spots caused by encrypted traffic by allowing you to use SSL inspection while maintaining performance efficiency.

Deep Packet Inspection
We believe you should never have to decide between security and performance. Sophos Firewall includes a highspeed deep packet inspection (DPI) engine to scan your traffic for threats without a proxy slowing down the process. The firewall stack can completely offload the processing to the DPI engine, significantly reducing latency and so improving overall efficiency.

Sophos Firewall blocks the latest ransomware and breaches with high-performance streaming DPI including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

Application Acceleration
A significant portion of your network traffic is important business application traffic destined for branch offices, remote users, or cloud application servers. This trusted traffic, which needs no additional security scanning for threats or malware, can be intelligently directed to the FastPath, reducing latency, and optimizing overall performance. This provides added capacity and headroom for traffic that does need deep packet inspection.

Sophos Firewall accelerates your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies - putting them on the FastPath through the new Xstream Flow Processors.

Sophos Central

Sophos Central is at the heart of everything we do. Our cloud management platform provides a single pane of glass to not only manage your firewalls, but also your full portfolio of Sophos security solutions.

Simply manage multiple firewalls
Sophos Central is the ultimate cloud management platform for all your Sophos products. It makes day-to-day setup, monitoring, and management of your Sophos Firewall easy. It also provides helpful features such as alerting, backup management, one-click firmware updates and rapid provisioning of new firewalls.

• Manage all your Sophos Firewalls and other Sophos products from a single console
• Configure changes and apply them to a group of firewalls or manage each firewall individually
• Create a backup schedule and store up to five backups in the cloud
• Schedule firmware updates across your entire network with just a few clicks