Sophos Central Device Encryption.
Full disk encryption, managed from one console.
Sophos Central Device Encryption turns on
native BitLocker on Windows and FileVault on Mac, then manages the policies and recovery keys for you from
the Sophos Central cloud console. Prove a lost device was encrypted, recover a locked out user, and keep
encryption running quietly in the background so it never gets in your people's way.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
Specifications
Central Device Encryption at a Glance
Managed from Sophos Central
Set an encryption policy once in the Sophos Central cloud console and it applies as users log in. There
are no key management servers to stand up and no back end to babysit. If you already run Sophos
endpoints, encryption lives right next to the rest of your security policies.
Native BitLocker and FileVault
Sophos does not invent its own crypto. It drives the encryption already built into your operating
systems, BitLocker on Windows and FileVault on Mac, so you get vendor
supported full disk encryption on boot and fixed data volumes.
Recovery and compliance
Recovery keys are escrowed securely in Sophos Central, and locked out users can pull their own key from
the Self Service Portal. Encryption status reporting gives you the proof auditors ask for when a laptop
goes missing.
Deployment and licensing
Policies push out remotely in a couple of clicks. On Windows the encryption agent ships with the
standard Sophos Central endpoint installer, so there is nothing extra to deploy. Licensing is per user,
in seat tiers, on one, two, or three year terms.
Not sure encryption is the layer you need first?
Device Encryption protects data at rest on lost or stolen machines. If you are also weighing endpoint
protection, XDR, or email security, line them up side by side before you buy.
It is licensed per user in seat tiers, such as 1 to 9 or 25 to 49 users, on one, two,
or three year terms. One user counts as one license even if they sign in on more than one machine, and
a seat only counts once an encryption policy is turned on for it. Pricing scales down as your seat
count goes up, so the best way to get an accurate number is a quick quote. As a Sophos Platinum
Partner, Firewalls.com can size the right tier and term for you.
No. Device Encryption is a standalone product and you can buy it on its own. If you
already run Sophos Central endpoint protection on Windows, there is nothing extra to install, since
the encryption agent comes with the standard endpoint installer once you hold the license. On Mac the
encryption agent is installed separately.
It uses the encryption already built into your operating systems, BitLocker on
Windows and FileVault on Mac. Sophos does not add its own algorithm. What Sophos Central adds is the
management layer on top, so you set policy, escrow recovery keys, and report on encryption status
across every device from one place.
Recovery keys are stored securely in Sophos Central, so nobody is ever permanently
locked out of a machine. A user who forgets their BitLocker PIN or Mac password can retrieve a
recovery key from the Sophos Self Service Portal without opening a help desk ticket, and your admins
can pull the key from the console if needed.
Licenses are term based, so renew before the end date to keep managing encryption in
Sophos Central. If a license lapses, the product stops being available in the console, though drives
already encrypted stay encrypted. Send us your current seat count and term and we will quote the
renewal so there is no gap in coverage.
It covers full disk encryption on boot volumes and fixed data volumes for Windows and
Mac laptops and desktops. Removable media such as USB drives is not covered by Device Encryption. You
can require startup authentication using a TPM and PIN, a passphrase, or a USB key, so a stolen laptop
is useless to whoever ends up with it.
Get every laptop encrypted without the headaches.
Tell us how many users you need to cover and we will size the right license tier and term. Firewalls.com
is a Sophos Platinum Partner, so you get certified guidance and honest pricing, not a shopping cart guess.
