SafeGuard Encryption

Protect Data Everywhere, Automatically: Sophos SafeGuard encrypts content as soon as it’s created.

Free Trial  Get a Quote
Sophos SafeGuard Encryption
image description

Overview

Sophos SafeGuard encrypts content as soon as it is created. The encryption is always on, allowing for seamless and secure collaboration. Synchronized Encryption proactively protects your data by continuously validating the user, application, and security integrity of a device before allowing access to encrypted data. This method of always-on protection goes everywhere your data goes, making it the most comprehensive data security solution on the market.

Always-on encryption protects data everywhere

Sophos SafeGuard Encryption Enterprise is data-centric, automatically securing content upon creation. Once encrypted, files remain secured when shared across platforms and devices, or if they are emailed or uploaded to cloud-based file sharing programs such as Box, Dropbox, or OneDrive. This method promotes secure collaboration everywhere, working across device and platforms without compromising security and preventing accidental data leakage.

Transparent encryption ensures user productivity

Encrypting, decrypting, and accessing information is automatic and transparent to the end user. Your users can open an encrypted file, edit it, or share it internally as they normally would. For externally sharing, decryption or creating password protected files takes only one click.

Proactively protects data against data theft

SafeGuard Encryption has the ability to intelligently protect your data against theft. It automatically encrypts your content, and the content stays encrypted even when it’s shared or uploaded to a cloud-based, file-sharing system.

Synchronized Encryption continuously validates the user, application, and device integrity. If your data ever ends up in the wrong hands, SafeGuard renders the information unusable; the files remain encrypted and unreadable.

Sophos SafeGuard Encryption Deployment

Protect Data Everywhere, Automatically

  • Full Disk Encryption: Sophos SafeGuard encrypts content as soon as it’s created. And with the encryption always on, you can enjoy seamless secure collaboration.

  • File Encryption: Encrypt files individually. They’ll remain encrypted even when transferred to a shared folder, removable USB stick, or the cloud.

  • Automatic and Transparent: Encrypting, decrypting, and accessing information is automatic and transparent to the end user.

  • Prevent Data Loss: Intelligently protect your data against theft, hacking malware, and accidental data loss.

Real-time threat protection

SafeGuard Enterprise offers Synchronized Encryption by connecting to Sophos Endpoint Protection. The SafeGuard local agent listens to an endpoint’s Security Heartbeat and enables automated, proactive protection. For example, in the event of an active infection, the SafeGuard agent can temporarily revoke the encryption keys, proactively protecting your data against threats. As soon as the security health of the device is restored, the SafeGuard Management Center pushes the encryption keys back to that device, restoring access to encrypted data.

Versions

SafeGuard Enterprise 8.0 - system requirements

Sophos XG Series firewalls come pre-loaded with the Sophos Firewall OS to provide optimal performance to meet today’s network security requirements.

Platforms supported x86
32-bit
x64
64-bit
IA-64 (Itanium)
64-bit
Minimum
disk space
Minimum
memory
SafeGuard Enterprise - Client
Windows 7 SP1
Home Premium, Professional, Enterprise, Ultimate Edition
300 MB 1 GB1
Windows 8.1
Pro, Enterprise Edition
100 MB 2 GB1 
Windows 10, Windows 10 TH2,
Windows 10 RS1, Windows 10 RS2

Pro, Enterprise and Education Edition
100 MB 2 GB1 
SafeGuard - Management Center
Windows 7 SP1
Professional, Enterprise, Ultimate Edition
1 GB 1 GB1
Windows 8.1
Pro, Enterprise Edition
Windows 10, Windows 10 TH2,
Windows 10 RS1, Windows 10 RS2

Pro, Enterprise and Education Edition
 
Windows Server 2008 SP2 Please follow standard Windows Server installation guidelines
Windows Server 2008 R2 SP2
Windows Server 2012 
Windows Server 2012 R2
SafeGuard Enterprise - Server
Windows Server 2008 SP2 2 Please follow standard Windows Server installation guidelines
Windows Server 2008 R2 SP2 2
Windows Server 2012 2
Windows Server 2012 R2 2

Windows Small Business Server and Windows Server Essentials are not supported. 

Database support
Microsoft SQL Server 2008 R2 SP3 , 2012 SP3, 2014 SP1
Microsoft SQL Server Express edition 2008 R2 SP3, 2012 SP3, 2014 SP1

Standards and Protocols
Symmetrical encryption: AES 128 bit, AES 256 bit, XTS-AES 128 bit, XTS-AES 256 bit   
Asymmetrical encryption: RSA (PKCS#1)
Hash functions: SHA-1, SHA-256, SHA-384, SHA-512
Password hashing: PKCS #5
Protocols and interfaces: PKCS #11, PKCS #15, LDAP, Microsoft Cryptographic Service Provider (CSP), SOAP, XML, SSL, TCG, CCID, Kerberos
PKI: PKSC #7, PKCS #12, X.509 certificates
Certifications
Common Criteria EAL 3+
Common Criteria EAL 4
Uses FIPS 140-2 validated cryptography
Safenet eToken and EnCase enabled
Languages supported
SafeGuard Enterprise Client: English, French, German, Italian, Japanese, Spanish
SafeGuard Enterprise Management Center: English, French, German, Japanese
Retired Client platforms
As SafeGuard Enterprise 6.0 has reached its End of Life in June 2017, Windows XP SP3 and Windows Vista SP2 are no longer supported.

1 This memory space is recommended for the PC. Not all of this memory is used by SafeGuard Enterprise.
2 Includes Internet Information Server

NOTE: If no service pack is specified, then SP0+ is implied.

Videos

We've assembled some product videos to give you basic information on the product.

Sophos Central Device Encryption Overview

This brief video showcases Sophos Central Device Encryption Overview.

Sophos Central Device Encryption Overview

This video discusses the Sophos Central Device Encryption Overview

How Does It Work?

With Intercept X, Sophos is redefining what customers should expect from next-generation endpoint security products. No other vendor offers signatureless exploit prevention, ransomware detection, visual root-cause analysis, and advanced cleanup technology in a simple to install, easy to manage package.

Documentation

Sophos SafeGuard Encryption Datasheets, Guides etc.

Need help? Call our Sophos techical experts

Email any time or call  877.386.3763 (call answer guarantee, 8am - 5pm MDT, M-F)

  • Sophos Silver Partner