Synchronized Security monitors outbound mail, and takes action if 5 or more emails that are classified as spam, or contain viruses are sent from a mailbox within a 10 minute period.

Note Synchronized Security is only available if you have a Sophos Endpoint license and a Sophos Email license.

You can turn the Synchronized Security feature on and off from Settings > General > Synchronized Security.

Synchronized Security Security Heartbeat enables Endpoints managed by SophDS Central to share health information with the Sophos XG Firewall Sharing the information of threats between network and the Endpoint, provides better insights for both. To enable Synchronized Security, all you need is two or more Sophos products that work together. At least one product must be managed through the Sophos Central management platform. And if you’re already a Sophos customer, you’re already halfway there. You do not need any additional subscriptions to enable Synchronized Security. The Synchronized Security menu allows you to configure Security Heartbeat to share health information and the Enhanced Application Control. Synchronized Security Sophos Firewall Manager.

The blocking process works like this:

Synchronized Security. With Sophos Synchronized Security, products share critical information via a unique Security Heartbeat. Sophos Wireless can use the Sophos Mobile compliance status of your Android and iOS devices to restrict network access. Sophos has set the bar for security. Its products integrate seamlessly to better service a company’s whole environment.” Wil Craig, Head of IT, HydraFacial The Sophos Central platform is accessible from anywhere and this has greatly simplified things for us.”.

  1. The originating mailbox is identified.
  2. The owner of the mailbox is identified, along with any devices assigned to the owner of the mailbox.
  3. The mailbox is blocked from sending emails for 1 hour. After 1 hour, the mailbox is unblocked automatically. You can't unblock it any sooner.

    Lockout periods increase every time the blocking process is triggered. The amount of time the mailbox is blocked for is doubled every time the spam threshold is reached. The previous block period needs to end before another can start. These timed blocks can't be removed and you have to let them expire.

    After 6 times, the mailbox will be blocked permanently, and the owner will not be able to send any email from that mailbox. If you believe a permanently blocked mailbox should be unblocked, please contact Sophos support.

  4. Sophos Anti-Virus runs an on-demand scan on the devices linked to the mailbox.
  5. An alert is sent to the administrator saying that the sender has been blocked.
  6. The events report is updated to show that the mailbox has been blocked.
Note If Synchronized Security is turned off, this will only disable the endpoint scan. The senders of outgoing spam and virus emails will still be blocked.

Synchronized Security monitors outbound mail, and takes action if 5 or more emails that are classified as spam, or contain viruses are sent from a mailbox within a 10 minute period.

Note Synchronized Security is only available if you have a Sophos Endpoint license and a Sophos Email license.

Sophos Synchronized Security

You can turn the Synchronized Security feature on and off from Settings > General > Synchronized Security.

Sophos Synchronized Security Function

SophosSophos synchronized security

Sophos Synchronized Security Datasheet

The blocking process works like this:

  1. The originating mailbox is identified.
  2. The owner of the mailbox is identified, along with any devices assigned to the owner of the mailbox.
  3. The mailbox is blocked from sending emails for 1 hour. After 1 hour, the mailbox is unblocked automatically. You can't unblock it any sooner.

    Lockout periods increase every time the blocking process is triggered. The amount of time the mailbox is blocked for is doubled every time the spam threshold is reached. The previous block period needs to end before another can start. These timed blocks can't be removed and you have to let them expire.

    After 6 times, the mailbox will be blocked permanently, and the owner will not be able to send any email from that mailbox. If you believe a permanently blocked mailbox should be unblocked, please contact Sophos support.

  4. Sophos Anti-Virus runs an on-demand scan on the devices linked to the mailbox.
  5. An alert is sent to the administrator saying that the sender has been blocked.
  6. The events report is updated to show that the mailbox has been blocked.

Sophos Synchronized Security Endpoint Protection Standard

Note If Synchronized Security is turned off, this will only disable the endpoint scan. The senders of outgoing spam and virus emails will still be blocked.