Sophos Firewall Web Server Protection

Sophos Web Server Protection protects web servers and their applications against threats and attacks. Its features help administrators secure published applications and manage incoming access.

Zero Trust for private applications

Sophos Zero Trust Network Access controls access to private applications by identity and device health; it serves a different purpose from a WAF protecting publicly accessible web applications.

Policy templates for business applications

Web Server Protection includes predefined policy templates for common business applications, such as Microsoft Exchange, Outlook Anywhere and SharePoint. These templates provide a starting point for suitable security settings; adapt them to your application and test the configuration.

Protection against web attacks

Web Server Protection helps defend web servers and applications against common attack techniques. Keep the firewall and web applications updated; a WAF does not replace patching the application itself. The WAF includes controls for SQL injection, cross-site scripting, URL and form hardening, directory traversal and cookie signing.

Reverse proxy

The integrated reverse proxy lets administrators control and filter traffic to and from web servers. It combines access control with options for application performance and availability. Load balancing and SSL offloading distribute traffic and reduce processing load on web servers.

Web Server Protection also supports the following operational capabilities:

• Management and reporting: configure protection and review web application activity through the firewall’s management interface.
• High availability: a correctly configured firewall HA cluster can reduce downtime; application availability also depends on the web servers and network design.