Sophos Workspace Protection

Sophos Workspace Protection secures work with web applications and access to internal resources, including when employees travel or external contributors collaborate. It focuses on controlled browser access, specific application permissions and protection against risky internet destinations. Companies can enforce policies closer to actual work rather than relying solely on a device’s location.

Protect business data where it is used

Many tasks now run in a browser, from customer portals and SaaS applications to AI services. Sophos Protected Browser enables access and data-handling policies, including controls for copying, pasting and downloads. This helps keep sensitive information within approved workflows and limit unwanted sharing. Rules can be adapted to users and applications.

An extension for supported existing browsers is available alongside the full browser. Its capabilities differ from those of the complete Protected Browser. For unmanaged devices and external workers, establish which controls are required and available with the chosen deployment.

Grant access to specific internal applications

Sophos Zero Trust Network Access, or ZTNA, allows access to defined internal applications. Permissions and supported device-health checks determine who can use a resource. For example, an external service provider can access a needed application without receiving broad network access. This illustrates a possible use; identity integration, the gateway and access policies must be configured appropriately.

Reveal suspicious destinations and emails

DNS Protection for Endpoints adds protection through a DNS agent on supported Windows devices. Requests to known malicious domains can be blocked even outside the corporate network. This device support should be evaluated separately from browser deployment options.

The included Sophos Email Monitoring System examines journal copies of emails and provides additional threat findings. Original delivery remains unchanged. EMS complements existing email protection; it does not replace an active email filter.

A suitable addition for modern workplaces

Workspace Protection suits companies seeking better control of SaaS use, external collaboration and access to private applications. Components are managed centrally through Sophos and can be deployed according to need. The standalone licence offered here does not include Sophos Endpoint protection. Device and workspace protection fulfil different roles and should be planned together.

Licence quantity depends on component use: Sophos takes the largest required quantity of browser users, ZTNA users and DNS agents. Selection should therefore account for guests, devices and existing entitlements as well as employees. Testing the key applications shows how protection and workflows can work together.