This archive report was first published on 9 December 2019.
On December 9, 2019, Sophos unveiled significant advancements to its Cloud Optix platform, designed to simplify cloud security and reduce risk exposure.
Cloud Optix is now easily managed on the unified cloud-based Sophos Central platform, alongside Sophos' entire portfolio of next-generation cybersecurity solutions. Real-time information sharing and threat response on Sophos Central empower organizations to improve threat detection and response times, simplify investigations, and minimize threat impact.
Cloud Optix answers a critical market need for cloud security through unmatched visibility into risky blind spots. Using artificial intelligence to automate detection of cloud architecture vulnerabilities and misconfigurations, security teams gain complete visibility into everything they have in the cloud, as well as the ability to respond and remediate security risks in minutes.
The innovative new features and capabilities include:
- Accelerating threat investigation: Cloud Optix now extends support for Amazon Detective with interactive and intuitive data about potential threats, such as failed login attempts and suspicious API calls across AWS workloads.
- Identifying Kubernetes security vulnerabilities: Cloud Optix now tracks Amazon Elastic Kubernetes Service (Amazon EKS) clusters and native Kubernetes deployments, providing comprehensive inventory and visualization of clusters, nodes, node pools, pods, containers, and more.
- Detecting cloud spend abnormalities: Cloud Optix monitors daily cloud spend and identifies unusual activity, highlighting top environments and services by spend with customizable spend threshold alerts.
- Detecting unintended public or cross-account access: Integration with the new AWS Identity and Access Management (IAM) Access Analyzer provides detail and context needed to quickly determine whether resource policies have been misconfigured to allow unintended public or cross-account access.
- Securing cloud traffic: Sophos UTM support for Amazon Virtual Private Cloud (VPC) Ingress Routing ensures traffic flowing in and out of VPCs and other virtual appliances is secure.
