Deep SSH inspection
Much like SSL inspection, Sophos should integrate SSH inspection for additional protection layers.
For instance, inspecting and scanning the following SSH protocol features: Exec, Port-Forward, SSH-Shell, X11-Filter. This should scan for all SSH-like activity, not exclusive to the standard SSH port.
It should be a great feature, not for admin control or server to server file transfer blocking but to mitigate the risk space of a compromised server and the opening of involuntary backdoors with tunnels. SSH is a wonderfull great tool but very harmefull....
It's been years that most competitors already supports this. How long will take for Sophos to support it?
Competitors support this feature. Please add it.