Connect with us

E-Business

Sophos Unveils XGS Series Firewall Appliance with Industry-Best TLS Inspection

Published

on

Dan Schiappa, chief product officer at Sophos
Kindly share this post

Sophos, a global leader in next-generation cybersecurity, today unveiled new XGS Series firewall appliances with unrivaled performance and advanced protection against cyberattacks. The new appliances feature industry-best Transport Layer Security (TLS) inspection, including native support for TLS 1.3, that is up to five times faster than other models available on the market today.

Dan Schiappa, chief product officer at Sophos, said, “Sophos Firewall XGS Series appliances represent the most significant hardware upgrade that we have ever released and introduce unmatched detection, protection and speed.

“Security teams can no longer afford to overlook encrypted traffic for fear of breaking something or hurting performance – there’s too much at risk.

“We’ve completely redesigned the Sophos Firewall hardware to handle the modern encrypted internet.

“Security teams now have the ability to easily inspect encrypted traffic and shine light on what was once a black hole, and they can confidently do so without compromising on performance.”

Cybercriminals Increasingly Using TLS to Avoid Detection

Sophos today also published new research, “Nearly Half of Malware Now Use TLS to Conceal Communications,” identifying a surge in cybercriminals using TLS in their attacks. The increasingly popular tactic is used by adversaries to encrypt and encapsulate the content of malicious communications to avoid detection as they carry out attacks.

In fact, 45% of malware detected by Sophos from January through March 2021 used TLS to conceal malicious communications. That’s a staggering rise from the 23% Sophos reported in early 2020.

Sophos has also seen an increase in the use of TLS to carry out ransomware attacks in the past year, particularly with manually-deployed ransomware. The majority of malicious TLS traffic that Sophos has detected includes initial-compromise malware, such as loaders, droppers and document-based installers like BazarLoader, GoDrop and ZLoader.

“TLS has undoubtably changed the privacy of internet communications for the better, but for all the good it’s done, it’s also made it much easier for attackers to download and install malicious modules and exfiltrate stolen data – right under the noses of IT security teams and most security technologies,” said Schiappa.

“Attackers are taking advantage of TLS-protected web and cloud services for malware delivery and for command and control. Their initial compromise malware is simply the advance guard for major attacks, as they’re setting up camp for the heavy artillery that follows, like ransomware.”

Accelerating Threat Protection
Powered by Sophos Firewall’s Xstream architecture, XGS Series appliances deliver the industry’s best zero-day threat protection, identifying and stopping the most advanced known and potential threats – including ransomware.

Protection is fueled by powerful threat intelligence, available only through SophosLabs Intelix and based on petabytes of SophosLabs threat data. Suspicious files are safely detonated in SophosLabs Intelix virtual environments as well as subjected to in-depth static analysis for additional detection coverage and intelligence gathering.

New Xstream flow processors within the appliances automatically accelerate trusted traffic, such as software as a service (SaaS), software-defined wide-area network (SD-WAN) and cloud applications, providing maximum headroom for traffic requiring TLS and deep packet inspection.

This greatly reduces latency and improves overall performance for important business applications, particularly those using real-time data.

The Xstream flow processors are software programmable, allowing Sophos to offload additional traffic in the future. The flexibility to enhance and adapt connectivity on the hardware itself further protects customers’ hardware investment.

Sophos provides unique and intuitive dashboard visibility of TLS traffic and inspection issues, and security administrators can add exceptions for problematic streams with one click. Performance is also optimized out of the box with an extensive set of rules that are updated and maintained by SophosLabs to exclude safe traffic from inspection.

Sophos Firewall XGS Series appliances and firmware are easily managed on the cloud-based Sophos Central platform alongside Sophos’ entire portfolio of next-generation cybersecurity solutions. Solutions share threat intelligence and automatically respond to security incidents through Sophos’ unique synchronized security approach. Integration with Sophos Managed Threat Response (MTR) further boosts protection with human analysis for 24/7 fully managed threat detection and response.

Availability

Sophos Firewall XGS Series desktop and most 1U rackmount appliances are available for immediate purchase exclusively through Sophos’ global channel of partners and managed service providers (MSPs). These models are ideally suited for small, medium and distributed organizations as an all-in-one network security solution with a strong price to performance ratio and diverse add-on connectivity options.

Additional models designed for enterprise edge environments requiring maximum throughput for more complex network configurations will be available in the coming weeks. Simplified licensing includes bundled protection with enhanced support.

What Analysts and Channel Partners Say

“Firewall appliances are evolving to secure newer use cases, including cloud and the sudden shift to a growing remote workforce,” said Frank Dickson, program vice president at IDC. “The elegance of Sophos Firewall’s Xstream dual processor architecture approach is its ability to accelerate trusted traffic from so-called ‘elephant flows’— large media streams, VoIP traffic and even cloud applications — to then leverage the general purpose CPU to perform appropriate resource-intensive processes, such as deep packet inspection and TLS inspection. The result is an adaptable network appliance designed to provide protection while meeting changing and accelerating business demands across a variety of use cases.”

“The new XGS Series firewall appliances are screaming fast with rock solid, unbreakable stability. We captured an immediate increase in performance that doubled our throughput, which completely blew us away. Sophos Firewall has always been industry best, but the XGS Series appliances are revolutionary and beyond compare with cutting-edge innovation that’s years ahead of other offerings,” said Sam Heard, president at Data Integrity Services.

“Sophos Firewall provides the protection our customers need as they increasingly move business critical applications to the cloud and adopt zero trust technologies. It’s a win-win for channel partners, who further benefit with tremendous growth opportunities to cross and up-sell across the entire suite of Sophos solutions and services.”

“Sophos is raising the bar and pushing the cybersecurity industry forward at warp speed with its new XGS Series appliances, which are nothing short of amazing,” said Karen Greer, CEO at Secure Content Technologies.

“Appliance installation is incredibly simple, and within minutes I could hear our technician yelling through the wall, ‘wow, this is fast!’ Sophos Firewall is effortlessly managed on Sophos Central, making it exponentially easier to secure and manage diverse and complex customer environments.

“Knowing that Sophos Firewall automatically shares threat intelligence with other solutions on the platform through Sophos’ synchronized security heartbeat feature is game changing, giving us complete confidence and peace of mind that our customers are protected – even the most evasive threats don’t stand a chance at getting by.”


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NIMC Trains 388 Personnel to Boost NIN Enrolment

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.

NIMC Trains 388 Personnel to Boost NIN Enrolment

The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.

The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes

In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.

Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.

She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.

“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.

“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.

Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.

She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.

“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.

Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.

“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.

The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.

“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media

Published

on

Kindly share this post

Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.

The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.

Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.

By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.

The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.

There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.

This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.

“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.

“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.

“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.

 

 


Kindly share this post
Continue Reading

E-Business

Lagos, NIPOST Partner to Transform e-Commerce Delivery

Published

on

Kindly share this post

Lagos State government and the Nigerian Postal Service (NIPOST) are joining forces to revolutionise e-commerce logistics in Nigeria’s economic capital.

Lagos, NIPOST Partner to Transform e-Commerce Delivery

The collaboration aims to enhance last-mile delivery and optimise connectivity within Lagos and beyond.

During a courtesy visit to governor Babajide Sanwo-Olu, Ms. Tola Odeyemi, postmaster-general and CEO of NIPOST, highlighted the strategic importance of Lagos in driving innovation in the e-commerce sector.

“As the e-commerce landscape continues to evolve, Lagos leads the charge in this growth. Through enhanced postal and logistics services, we seek to empower small businesses and individuals engaging in this expanding sector,” Odeyemi said.

She underscored her commitment to fostering partnerships that would align NIPOST with the demands of a modern economy, identifying Lagos as a pivotal partner.

Lagos is central to achieving our vision of efficient and future-ready postal services, she added.

Odeyemi applauded Lagos state for its vibrant programmes that drew global attention during the December festivities, stating that such initiatives could drive further economic growth and diaspora engagement.

She pledged enhanced postal and logistics support to drive e-commerce growth and empower small businesses in Nigeria., highlighting NIPOST’s readiness to collaborate with Lagos State to enhance last-mile delivery, foster innovation, and improve public service delivery.

Lagos, as Nigeria’s economic hub, is a critical partner in our vision to make NIPOST’s services more efficient and relevant in today’s world, Odeyemi stated.

She commended Lagos State for its strides in infrastructure and governance, underscoring the importance of strategic partnerships to optimize connectivity within Lagos and nationwide.

Governor Sanwo-Olu challenged NIPOST to rethink its approach and embrace technology as a transformative tool for business facilitation.

“For NIPOST to remain relevant, you must challenge the status quo, revamp your services, and adopt innovative strategies that address today’s needs and anticipate future demands,” the governor advised.

He also pledged Lagos state’s support in upgrading NIPOST’s infrastructure to improve service delivery and create an enabling environment for seamless e-commerce operations.


Kindly share this post
Continue Reading

Trending