No matter how skilled an opponent is at covering his tracks, he always must cross the network. Sophos NDR resides deep within your network, monitoring network traffic using five real-time threat detection engines to identify signs of malicious or suspicious activity.

With Sophos NDR you can see and stop attackers faster. By using a combination of AI-driven machine learning, advanced analytics and rules-based matching techniques, it identifies threats that often go unnoticed until it’s too late, including:

• Threats on unprotected devices such as POS systems, IoT and OT devices, and older operating systems
• Rogue assets that opponents use to launch attacks
• Internal threats such as uploading sensitive data to an external location
• Zero-day attacks and more

Additionally, Sophos NDR, when combined with other security telemetry, provides threat analysts with a more complete and accurate picture of the entire attack path and its progression, allowing them to respond more quickly and comprehensively.

What’s new in v1.7

We continue to enhance Sophos NDR to further accelerate network threat detection and response. The rich graphical interface and forensic investigation tools in the new Investigation Console enable analysts to dig deeper into your network activity and pinpoint problems faster. Use cases include:

• Get comprehensive insight into all network activity from the past 30 days
• Analyze application activity, flow risks, and communications on non-standard ports
• Monitor network activity over time to identify suspicious patterns and behaviors
• And much more

For maximum flexibility, Sophos NDR is deployed as a virtual appliance on VMware or Microsoft Hyper-V, in the cloud on AWS, or on a range of certified hardware devices. The latest release features a refreshed certified hardware portfolio, including a new entry-level model.

To learn more about the latest improvements, visit the Sophos NDR community forum

Discover Sophos NDR today

Existing Sophos NDR customers will automatically benefit from all the latest improvements at no additional cost. To get started, visit the community forum and download the Investigation Console image from Sophos Central.

Sophos NDR is available with the self-managed Sophos XDR tool and our 24/7 fully managed Sophos MDR service. All Sophos customers can activate a free 30-day trial now, directly within their Sophos Central console. Contact your Sophos partner or account team to learn more and discuss your security operations needs.