Sophos Central Device Encryption for Clients

Description   Sophos Central Device Encryption is a comprehensive security solution that offers full disk encryption for Windows and macOS devices, safeguarding them against loss or theft. It perfectly integrates with Sophos Endpoint, managing BitLocker (Windows) or FileVault (macOS) from Sophos Central. The solution ensures secure escrow of Recovery Keys, enabling administrators to view their devices’ encryption status and demonstrate compliance. The encryption process is user-friendly and starts automatically if the Device Encryption policy does not specify ‘Require startup authentication.’ Users may need to define a PIN or password if required by the Device Encryption policy. This product caters to all users and simplifies the task of enabling disk encryption on multiple endpoints while providing monitoring and recovery functionality. Organizations can choose from various subscription options, including 1-month, 12-month, 24-month, 36-month, and 60-month plans. This flexibility allows businesses to select the duration that best fits their needs while ensuring ongoing security updates and comprehensive support. The Sophos Central Device Encryption service is ideal for those seeking a long-term commitment, potential cost savings, and continuous protection against data loss or theft. Key Features Integration with Sophos Endpoint CDE seamlessly integrates with Sophos Endpoint, managing BitLocker (Windows) or FileVault (macOS) from Sophos Central. This tight integration ensures efficient management and security. Recovery Key Escrow Recovery Keys are securely escrowed, providing peace of mind for administrators. This feature allows you to retrieve encryption keys when needed. Encryption Status Monitoring Administrators can view the encryption status of devices, making it easy to track compliance and identify any unprotected endpoints. User-Friendly Encryption Process If the Device Encryption policy does not require startup authentication, the encryption process starts automatically. Users only need to define a PIN or password if specified by the policy. Scalability and Simplified Management CDE simplifies enabling disk encryption on multiple endpoints, streamlining the process for administrators.  FAQs 1.      What is Sophos Central Device Encryption? CDE provides full disk encryption for Windows and macOS devices, protecting them against loss or theft. It integrates seamlessly with Sophos Endpoint products, such as Intercept X Advanced with XDR. 2.      How does it manage encryption? CDE manages BitLocker (Windows) or FileVault (macOS) from Sophos Central. Recovery Keys are securely escrowed, ensuring peace of mind for administrators. 3.      What happens during the encryption process? If the Device Encryption policy doesn’t require startup authentication, disk encryption starts automatically. Users need to define a PIN or password if specified by the policy. 4.      How user-friendly is it? The solution simplifies enabling disk encryption on multiple endpoints while providing monitoring and recovery functionality. 5.      What’s the user capacity and duration? CDE caters to all users and is available for a short-term and longer-term duration.   Datasheet