Cyfer Tech Blog

Introducing Active Threat Response for Sophos Switch and Sophos Wireless (AP6 Series) 

We are thrilled to announce the latest advancement in the Sophos cybersecurity suite—Active Threat Response for our network access layer products, Sophos Switch, and Sophos Wireless (AP6 Series only). This new functionality represents a significant leap forward in their mission to provide comprehensive, multi-layered security solutions to protect your networks from evolving threats. 

What is Active Threat Response? 

Active Threat Response is an innovative feature designed to enhance the security and management capabilities of your network infrastructure. It works in conjunction with Sophos Managed Detection and Response (MDR), Sophos Extended Detection and Response (XDR), and even third-party solutions. Threat feeds sent via an API trigger an automatic response to isolate compromised hosts across all Sophos AP6 Series access points and Sophos switches on the network. This rapid isolation prevents lateral movement, facilitating quicker remediation at the critical access layer. 

For customers using Sophos Network Detection and Response (NDR), this new functionality adds a responsive action to detections from deep within the network, ensuring a robust and comprehensive defense mechanism. 

Key Benefits of Active Threat Response 

Active Threat Response introduces a new, unique dimension to the Sophos ecosystem by: 

Isolating Wired and Wireless Hosts 

Active Threat Response can isolate both wired and wireless, managed, and unmanaged hosts, ensuring that any compromised device is swiftly contained to prevent further spread of threats across the network. 

Preventing Lateral Movement 

By stopping lateral movement, Active Threat Response buys valuable time for remediation. This is crucial in minimizing the impact of threats and protecting sensitive data from being accessed or exfiltrated by attackers. 

Utilizing Multiple Trusted Threat Feeds 

Active Threat Response uses threat feeds from multiple, trusted sources, including Sophos and third-party solutions. This multi-source intelligence ensures a broad and reliable detection capability, enabling a swift and accurate response to threats. 

Immediate Availability 

Active Threat Response is available immediately via Sophos Central for Sophos Switch and Sophos Wireless (AP6 Series only). To leverage this functionality, a valid support subscription for each switch or AP6 access point is required. 

Enhanced Protection with Sophos Firewall 

While a Sophos Firewall is not a prerequisite for utilizing Active Threat Response, combining it with Sophos Switch, Sophos Wireless, and Sophos Firewall ensures the highest level of protection at every network layer. This integrated approach provides a seamless and robust defense strategy against sophisticated cyber threats. 

Contact Us for More Information 

We are committed to providing our customers with cutting-edge security solutions to stay ahead of threats. For further information about Active Threat Response and how it can enhance your network security, please contact our team! 

#Sophos #CyberSecurity #ActiveThreatResponse #NetworkSecurity #CyferTech 

Introducing Sophos Central Custom Dashboards: A Game-Changer for Cybersecurity Management 

At Cyfer Tech, we are dedicated to bringing our customers the latest advancements in cybersecurity to help you stay ahead of threats and streamline your operations. As a proud Sophos Gold Partner, we are excited to share the latest innovation from Sophos that will transform the way you manage your security landscape: Sophos Central Custom Dashboards. 

A New Era of Security Management 

Sophos Central is the AI-native security platform trusted by over 600,000 organizations worldwide. This powerful platform connects and controls all your cyber defenses through a single interface, simplifying management and accelerating protection against ransomware and breaches. Today, Sophos takes another significant step in enhancing security management with the introduction of custom dashboards. 

What Are Custom Dashboards? 

Custom dashboards in Sophos Central provide a flexible, interactive experience designed to optimize user operations and workflows. This new feature allows you to curate a single view within a managed customer environment using various data points, from threats and endpoint signals to alerts and firewall telemetry. Now, you can replace your default Sophos Central landing page with a dashboard tailored to your specific needs. 

Key Benefits 

1. Simplified Security Management: Custom dashboards bring all critical information to your fingertips, reducing the time and effort required to manage your security infrastructure. 

2. Enhanced Operational Efficiency: With an intuitive user interface and flexible layout, creating and modifying dashboards is quick and easy. This ensures that the most relevant content is always accessible, helping you to make informed decisions faster. 

3. Actionable Data: Interactive data visualizations (widgets) provide actionable insights, allowing you to drill down for further details and context as needed. This means you can respond to threats and incidents more effectively. 

Feature Highlights 

User-Based Customization: Create and modify dashboards to build bespoke views of the information you need across managed tenants within the same data region. This personalized approach ensures that each user sees the data most relevant to their role and responsibilities. 

Flexible Layout: The customizable layout allows for resizing and rearranging widgets, giving you control over how information is presented. Whether you need a single comprehensive dashboard or multiple targeted views, the choice is yours. 

Extensive Widget Library: Sophos Central offers over 17 interactive widgets, each providing multiple views. These include: 

•  Account health 
• Device health 
• Threats 
• Firewall connectivity 
• XDR (Extended Detection and Response) 
• MDR (Managed Detection and Response) 

Interactive Filtering 

Filter data by relative attributes and adjust time ranges to focus on the information that matters most. Context-aware click-throughs open detailed information in new browser tabs, making it easy to delve deeper into specific issues. 

Sophos-Curated Dashboards 

Alongside custom dashboards, Sophos has introduced new curated dashboards for Threat Analysis and Device Health. These ready-made dashboards provide critical insights and help you quickly assess the health and security posture of your environment. 

Elevate Your Security with Cyfer Tech 

At Cyfer Tech, we are here to help you leverage the full potential of Sophos Central Custom Dashboards. Our team of experts can assist you in setting up and optimizing these dashboards to ensure you get the most out of your investment. 

Ready to take your cybersecurity management to the next level? Contact us today to learn more about Sophos Central Custom Dashboards and how Cyfer Tech can support your security needs. 

Thank you for trusting Cyfer Tech with your cybersecurity. Together, we can achieve a safer, more secure digital environment. 

For more information, please visit our website or contact our support team. 

Overcoming Common Excuses Against Multi-Factor Authentication 

At Cyfer Tech, we understand the critical importance of multi-factor authentication (MFA) in safeguarding our digital assets. Yet, despite its proven effectiveness, many organizations encounter resistance from users, management, and even IT teams. Here, we address the ten most common excuses for avoiding MFA and provide effective counterarguments to ensure your organization can bolster its security posture. 

My password is already strong enough 

While a robust password is a good start, it isn’t sufficient on its own. With cyberattacks becoming more advanced, even the best passwords can be compromised. MFA adds an additional layer of security, ensuring that even if passwords are stolen, your account remains protected. 

I don’t want to use my phone number for MFA 

You don’t need to use your phone number. There are alternatives like authenticator apps that don’t require personal contact information. These apps can provide secure, convenient MFA without compromising personal data. 

My phone number will be used for marketing or sold 

Reassure your employees that their information is safe. Your IT department or MFA provider should have strict policies against using or selling personal data for non-security purposes, complying with privacy guidelines. 

MFA is too new and untested 

MFA has been around for a long time. For instance, banks have used debit cards with PINs—an early form of two-factor authentication—for years. Emphasizing this can help alleviate concerns and show the reliability of MFA. 

Our IT team is too busy with other priorities 

Implementing MFA can prevent more severe issues in the future, such as ransomware attacks that could halt operations. Without MFA, the risk of security breaches is higher, ultimately increasing the workload for your IT team. 

MFA setup is too complicated 

Modern MFA solutions are user-friendly and typically require just a single click to enable. Gone are the days of complex setups. Most applications now include easy-to-use APIs that simplify the MFA implementation process. 

MFA doesn’t work with our older systems 

Today’s MFA solutions are designed to be compatible with a wide range of systems, including legacy applications. Techniques like identity orchestration and out-of-band MFA can integrate with older systems, mitigating risks without major overhauls. 

The risk doesn’t justify the investment in MFA 

The cybersecurity landscape has changed significantly. With the move to cloud services and remote work, strong authentication is essential. MFA is a crucial part of a layered security strategy, protecting against both internal and external threats. 

I don’t understand MFA well enough to use it 

Education is crucial. Simplifying the concept of MFA and providing straightforward explanations can make users more comfortable. Communicating the importance of security and how MFA protects their data is essential. 

I don’t have anything worth stealing 

Every piece of personally identifiable information (PII) is valuable to cybercriminals. Even if you think you have nothing worth stealing, hackers target all kinds of data for fraudulent activities. Major breaches at companies like Equifax and Marriott have shown that everyone is a potential target. 

Conclusion 

By addressing these common excuses and providing clear, factual counterarguments, organizations can overcome resistance to MFA and significantly enhance their security measures. At Cyfer Tech, we are committed to helping our clients implement effective security strategies, including the critical adoption of multi-factor authentication. Let’s work together to ensure a safer digital environment for all.