Sophos is renowned for its cybersecurity and endpoint software, making its framework perfect for a secure unified endpoint management solution for your mobile devices. Sophos Mobile is a complete endpoint management platform that's compatible with Android, iOS, MacOS and Windows devices, earning it our best pick for MDM security. You can manage both company-owned and employee devices with specialized BYOD features.
View all our recommendations for mobile device management (MDM) solutions on our best picks page.
Best for Security
As a cybersecurity company, Sophos embeds each of its products with its comprehensive anti-malware and endpoint protection software. Any endpoint can be an access point for attackers to infiltrate your network to do damage, steal data or implant ransomware. Sophos' software specializes in countering ransomware and acting on its own to respond to threats faster than it can inform you.
Sophos' security application is installed on all your enrolled devices, ensuring that each endpoint has an equal layer of protection. This approach creates a fortified wall around your network and makes sure that there are no weak spots in your software or hardware. The application can detect and block phishing attacks and unwanted web content, keeping the phone's user from making a mistake and compromising the network. The application is available to Android, iOS, MacOS, Windows and Linux devices. The application can detect malware already on a device and remove it before entering it into the system. The authenticator feature allows you to set multifactor authentication by utilizing one-time passwords sent to the user's email for maximum security.
Sophos covers and blocks so many ways that malicious actors try to infiltrate your endpoints. Malicious code can even be hidden with QR codes, so Sophos Mobile Security watches out for such situations and blocks them.
Plans and Pricing
Sophos Mobile come in a Standard or Advanced edition. The Advanced edition comes with more productivity applications and mobile SDK. Pricing is based on quotes that depend on the needs of your company, factoring in how many devices you need to cover, how many admin users you require, and if you plan to implement the software through Sophos' own SaaS cloud service, Sophos Central, or as a stand-alone platform on your on-premise servers. Since billing is on a per-device basis, there's no need to renegotiate contracts or pay any other fees when adding new users.
For an additional cost, you can sign up for advanced technical support, which grants you 24/7 access to a support agent as well as a warranty.
Sophos Mobile is prioritized to allow you full control over your company data and applications, whether they're on your company-owned or employee-owned devices.
Sophos Central is one of two interfaces available for managing Sophos Mobile and is recommended if you prefer an SaaS solution or use other Sophos products. It's a one-stop interface for nearly all of Sophos' security services, giving you a comprehensive dashboard with your alerts and device statuses.
You can log in to Sophos Central from any browser on the Sophos website. Sophos Central manages your endpoint protection, web protection, wireless protection, encryption application and email security. The dashboard allows you to navigate between your different modules, with a comprehensive, customizable dashboard keeping you informed on the activity that's most important to you.
The Sophos Mobile module is where you set up your mobile device policies, determining how much autonomy users have with company devices and what they can do with company data and applications on personal devices. You can see the compliance status of every device, breaking it down by device type, OS or custom perimeters. You can also customize your mobile dashboard with different widgets to give you readouts and charts of your entire mobile fleet's status. From here you can access device groups or individual devices to enter their settings and set policies specific to those groups.
There's also a self-service portal that your users can log in to. Here they can change and recover passwords, send requests and customize their status.
If you prefer to host the system on-premises, you can install the platform onto your own servers so that your data never leaves your location. This is a more hands-on approach for those who need to take extra precautions with their data security. The installation process for this option is much more involved. It's important to know that the Central option requires less attention from IT personnel and the installation process is much quicker and easier.
Sophos Mobile allows you to set up several different policies and rules for your corporate-owned devices, as well as employees' personal devices, thanks to a containerized environment you set up on enrolled devices. These actions can be set up to enforce policies automatically with certain rules. Certain phone functions and content can be locked in a container that's only accessible if certain parameters are met, such as certain timeframes, geolocations or connection to approved IP addresses.
Geofencing features allow you to lock out certain applications or files from being accessed outside designated areas. Lost or stolen devices can be located with GPS tracking.
You can set up app control to remotely install and remove applications, while also whitelisting and blacklisting applications that users can access. Content such as email and documents can also be managed through the interface, giving only certain users access to containers you set up.
For BYOD purposes, Sophos Mobile works in isolated containers on your employees' enrolled devices. Opening the container is almost like switching to a different device with completely isolated apps and data from the rest of the user's personal items. If the phone is stolen or lost, or if the employee leaves the company, the container can remotely be wiped. You can set advanced security rules for containers, including multifactor authentication.
Devices enrolled in your MDM also have access to Sophos Mobile Security, which provides anti-malware, firewall and web browsing protection. The software can filter out unwanted content on the web and securely store passwords.
Sophos Mobile comes with two key productivity applications for keeping your office's work processes behind a secure wall:
- Sophos Secure Email is a containerized personal information manager that interacts with your business email to keep your messages private and makes sure your inbox is clean of threats. Outgoing messages as well as attachments are encrypted and remain secured within the container. Only approved data can leave the Sophos container. You can isolate business email, calendars and contacts from your private data and bring them into your containerized environment easily. Only devices that meet the company's compliance standards can access this data. The app also detects suspicious links and attachments and blocks users from opening them. Security policies can make it so that attachments sent to the container remain encrypted and don't leave, and you can further secure them by restricting clipboard functionality and screen capture.
- Sophos Secure Workspace is a content management app that allows you to organize, edit, and share documents and web content, all while keeping it secure and encrypted within the container. The app is compatible with a variety of document formats, including Office files, allowing you to open and edit them as well as share them with other users within the organization. Files are encrypted with government-approved AES 256-bit, with encryption keys kept by Sophos. There's also a web browser for secure browsing. Other applications your organization approves from the iTunes App Store and Google Play Store can be whitelisted and grouped into an enterprise app store to be kept in the container.
Customer support is available through live chat, email and Twitter. Our exchange with service representatives over live chat was mostly positive, although responses were sometimes delayed and our conversation was much longer than most live chat interactions with support. The representative we chatted with was friendly and able to accurately answer all our questions. They also directed us to other avenues where we could find out more information about the platform.
Sophos offers optional technical support plans, which include a warranty as well as 24/7 access to a technical support representative. The Sophos website has an extensive knowledgebase with guides and FAQs for all its products, including Sophos Mobile. There's also an active forum of users where you can ask questions and engage with other Sophos customers. You can reach helpful videos and articles right from the Sophos Central dashboard to assist you in tasks like initial setup, enrolling devices and configuring your security settings.
If you are fond of using Sophos products, the Central platform is user-friendly and convenient, but not so much if you prefer other services for your endpoint protection, anti-malware or productivity. Sophos does not integrate with other forms of protection, making it better as a comprehensive platform than as part of a diverse collection of protective tools.
Editor's Note: Looking for a mobile device management solution? Click the Compare Quotes button below to have our sister site Buyer Zone connect you with vendors that can help.
How Does Your Business Stack Up? Get a Free Business Report Card!Get My Report Card