Web Application Firewall

Sophos Web Application Firewall intercepts traffic to your servers to protect them from tampering and hacking attempts. It secures your web applications against more than 350 attack patterns including SQL injection, cross-site scripting and directory traversal. We also scan all inbound files and content with our dual antivirus agents to keep infected content off your network.

Server Hardening

You can close the door on vulnerabilities in your websites without involving developers. Static URL hardening prevents hackers from manually constructing "deep-links" that lead to unauthorized access. Form hardening ensures malicious scripts and code cannot be entered to exploit your database. And cookie protection makes sure cookies are signed to prevent tampering.

Reverse Proxy Authentication

Our reverse proxy-authentication offloading provides persistent basic or form-based authentication for your web facing applications. It adds an extra layer of security to services like Outlook Web Access for Exchange by allowing users to authenticate against our exploit-free reverse proxy. It's the perfect solution for replacing Microsoft's discontinued Forefront TMG.

Simplified Management

Our Web Server Protection makes deployment and management simple. We provide you with tools like auto-discovery of active servers, web application firewall profiles, dashboard status and notifications, along with detailed logging and reporting.

Choose how to deploy

You can choose to install on your platform of choice: hardware, software, virtual or even in the cloud.

SG Series
Sophos SG Series appliances are purpose-built devices with the latest technology to provide the ultimate in performance.

Software and Virtual
Install the UTM image on your own server hardware or on your preferred virtual environment, including VMware, Citrix, Microsoft Hyper-V and KVM.

Cloud
Sophos UTM is an industry leader and a preferred solution for securing Amazon Web Services network infrastructure.

Required subscriptions

Sophos Web Server Protection can be purchased standalone or with any of our other UTM modules. Consider a FullGuard license, which offers incredible value on our complete network protection solution.