Sophos Intercept X Advanced for Server (Formerly Central Server Protection Advanced)
Unmatched Server Protection

Deep Learning Neural Network

Protects against never-before-seen malware
Our constantly updated artificial intelligence model that is trained to look for suspicious attributes of potentially malicious code

Anti-Exploit

Prevents an attacker from leveraging common hacking techniques
Protects against browser, plugin, or Java-based exploit kits even if your servers are not fully patched

Root Cause Analysis

Incident response with forensic detail
Provides the who, what, when, where, and how of a given attack, allowing IT the ability to constantly improve upon their security posture

CryptoGuard and WipeGuard

Stops ransomware and master boot record attacks
Automatically identifies and stops unwanted encryption attempts as well as system-crippling MBR attacks

Anti-Hacker Capabilities

Protects against the most persistent hacking attempts
Prevents pervasive, real-time hacking techniques such as credential harvesting, lateral movement, and code-caving

Server Lockdown

Provides application whitelisting with a single click
Reduces the attack surface by ensuring that only known and trusted application executables can be configured and run on a server

Intercept X Advanced for Server

Formerly Central Server Protection Advanced

New features include:

• Deep Learning
  The artificial intelligence built into Intercept X Advanced for Server is a deep learning neural network, an advanced form of machine learning, that detects both known and unknown malware without relying on signatures.
• Exploit Protection
  Denies attackers by blocking the exploits and techniques used to distribute malware, steal credentials, and escape detection. This allows Sophos to ward off evasive hackers and zero-day attacks in your network.
• Active Adversary Protection
  Protects against advanced hacking techniques performed by attackers to establish their presence on a device, steal credentials, escalate privileges, or gain more enduring access, including Code Cave mitigation and credential theft protection.
• WipeGuard
  Advanced anti-ransomware protection, preventing adversaries from encrypting the master boot record (MBR).
• Root Cause Analysis
  Detailed, forensic-level analysis illuminates the root causes of attacks and their infection paths, and offers guidance to help remediate infections today and bolster your security posture.

Central Server Protection

Formerly Central Server Protection Standard

New features include:

• Malicious Traffic Detection (MTD)
  Monitors HTTP traffic for signs of connectivity to known bad locations such as command and control servers, an early indicator that a new piece of malware may be present.
• Synchronized Security Heartbeat™
  Synchronized Security simplifies and unifies defenses with real-time intelligence sharing between your servers and firewall. Get better protection against advanced threats and spend less time responding to incidents.
• Web Control
  Provides control of potentially inappropriate websites for acceptable use by site category.
• Application Control
  Point-and-click blocking of applications by category or by name. Enables administrators to block certain legitimate applications from running on servers.
• Peripheral Control
  Enables you to monitor and manage access to removable media and peripheral devices connected to your physical servers.
• Data Loss Prevention (DLP)
  Designed to reduce the risk of accidental data transfer to removable storage devices, corporate web browsers, email clients and IM clients.
• Windows Firewall Control
  Provides the ability to monitor and control the native firewall on Windows servers.
• Cloud Workload Discovery (AWS Map View)
  Attackers take advantage of unused cloud regions to avoid detection. Sophos now discovers workloads in every public AWS region, even the ones you are not actively using.