Sophos 全线产品介绍

Sophos UTM 功能特性介绍Written By Suntengfei2013年11月目录1功能特性........................................................................................................................................... - 3 -1.1基础防火墙功能 ....................................................................................................................... - 3 -1.2网络安全 ................................................................................................................................... - 4 -1.3网页安全 ................................................................................................................................... - 8 -1.4反垃圾邮件功能 ..................................................................................................................... - 10 -1.5终端防病毒功能 ..................................................................................................................... - 12 -1.6无线保护 ................................................................................................................................. - 13 -1.7网页应用服务器防护 ............................................................................................................. - 16 -1功能特性1.1基础防火墙功能1.2网络安全1.2.1.1入侵防御系统●支持对全球IP地址按国家、地区分类，并可进行实时通讯拦截●支持TCP/SYN/UDP/ICMP Flood攻击防御●支持端口扫描攻击防御●支持在线式的IPS系统，支持万余条攻击特征代码●支持攻击特征代码库通过Internet在线实时更新●支持可用手工方式启用或停用某条特征代码●支持异常协议检测●支持针对Windows、Unix、Linux、ios、安卓、windows Mobile、Symbian等操作系统的弱点进行防御支持邮件告警通告入侵事件入侵防护部署示意图终端补丁库1.2.1.2VPN功能●支持最新终端使用包括Mac、Lunix、Windows等最新操作系统通过设备登录●支持多种远程访问方式，如PPTP、L2TP over IPSec协议，兼容iphone、iPad、Android系统的智能移动平台●与第三方标准IPSec设备兼容●支持VPN加速技术，使用VPN压缩等技术实现提高访问速度和减少数据流量的效果●支持DES、3DES、AES 128、AES 192、AES 256、Blowfish、Twofish、Serpent加密算法●支持UMTS/3G USB卡连接InternetVPN 部署示意图RED VPN部署示意图SSL VPN配置文件下载1.2.1.3QOS功能针对不同的应用，提供灵活的方式，在不同时刻对不同网络、主机或用户组应用不同的策略。

欧洲排名第一的防杀病毒软件-Sophos随着计算机网络的迅速普及，搭乘了网络信息高速列车的计算机病毒，传播速度倍增。

国际间的新病毒只需在几小时之内便会出现在我国用户面前，使他们的计算机体系时刻处于新病毒的威胁之中。

因此，反病毒产品技术的优劣，对用户的计算机安全起着至关重要的作用。

如果用户能够真正判别反病毒产品的优劣，那么，计算机安全其实近在咫尺。

对于用户来说，防病毒产品的质量直接关系到计算机体系的防护。

但是，选择质量优秀的反病毒产品，对用户既是重要的却又是困难的。

重要性体现在防病毒产品是否能够有效查杀病毒，查杀时是否具备安全性，它与软、硬平台是否存在兼容性、可靠性的问题，以及运行效率如何…　这些都直接关系到用户的切身利益。

而困难性则体现在当前我国反病毒产品市场, 受广告宣传主导因素的影响非常大。

用户在没有专业测试手段的情况下，对反病毒产品的优劣难以判断。

其实，国际权威机构的测试及其认证是解决用户上述问题的最好方式，因为被测试产品只有完全通过严格的专业测试-，才能获得认证标志。

作为欧洲最大防病毒提供商，Sophos的反病毒产品提供了全方位的的防毒和杀毒的功能。

其频获大奖的技术、完备的产品系列, 以及杰出的工程设计水准能为企业用户提供全方位的病毒防护。

　SOPHOS产品系列由Sophos Anti-virus、MailMonitor、SAV Interface、SOPHOS SBE中小企业版四部分组成：其中Sophos Anti-virus用于文件服务器、桌面工作站以及移动设备的病毒防护；MailMonitor用于邮件系统（SMTP server和Email Server）的病毒防护；SAV interface则是提供给第三方的二次开发接口，允许用户把Sophos病毒引擎整合到他们的产品中。

SBE中小企业版可以支持WINDOWS和苹果MAC操作系统，分为Sophos Small Business Suite、Sophos Anti-Virus Small Business Edition、PureMessage Small Business Edition三个产品，支持5用户、10用户、25用户、50用户和100用户五个用户数量等级。

Sophos 安全产品介绍及成功案例销售工程师 Nick Niu 牛玉孝 Nick.niu@Sophos 公司介绍Sophos，守护使，意思是智慧， 20年前创立于牛津 年前创立于牛津， Sophos，守护使，意思是智慧， 20年前创立于牛津，创始人来自于牛津大学 中文网站： 中文网站： 为商业、教育、政府机构提供完整的终端安全解决方案 为商业、教育、政府机构提供完整的终端安全解决方案 机构提供 提供反病毒 间谍/广告软件、垃圾邮件、个人防火墙；应用程序控制、 提供反病毒、间谍/广告软件、垃圾邮件、个人防火墙；应用程序控制、设备 软件 控制、行为分析、NAC、 控制、行为分析、NAC、数据安全功能 年销售额4亿美元， 年销售额4亿美元，列全球安全行业第三 全球1500多名员工 全球1500多名员工 1500 2007年 获得国内“最佳企业终端安全奖” 2007年，获得国内“最佳企业终端安全奖”2业界领先的端点保护和数据保护行业领先端点保护Gartner领导象限 Gartner领导象限 Gartner领导象限 领导象限行业领先数据保护Gartner领导象限 领导象限赛门铁克SafeGuard DLP/CMF SafeGuard 设备加密 SafeGuard 数据交换 SafeGuard 管理中心 SafeGuard 文件和文件夹 加密 SafeGuard 端口和配置 保护 SafeGuard 合作伙伴： 合作伙伴： 微软、英特尔、 微软、英特尔、 希捷Check Point 软件技术Utimaco安全软件 安全软件 GuardianEdge技术集中式管理Panda统一代理5业界领先的安全供应商 业界领先的安全供应商顶尖的端点保护产品 数据保护产品 端点保护产品和数据保护产品 端点保护产品 高可用性产品带来的高效益 配套的解决方案咨询和客户服务32007年端点安全市场份额 年端点安全市场份额Worldwide Corporate Endpoint Security Software Revenue by Vendor, 2007Source: IDC, 2008Total = $2,647.8M4SOPHOS安全产品列表 安全产品列表产品端点安全产品型号Endpoint security and control Sophos Antivirus功能管理中心、反病毒、个人防火墙、恶意软件、 管理中心、反病毒、个人防火墙、恶意软件、 间谍软件、应用程序控制， 间谍软件、应用程序控制，NAC 管理中心、 管理中心、反病毒 管理中心、反病毒、 管理中心、反病毒、个人防火墙 管理中心、反病毒、防火墙、 管理中心、反病毒、防火墙、垃圾邮件 控制未授权、客人、 控制未授权、客人、不合法主机接入网络 反垃圾邮件、病毒、间谍软件、 反垃圾邮件、病毒、间谍软件、邮件内容过滤说明>100用户 用户中小企业安全包Sophos 计算机安全 Sophos 安全包< 100用户 用户 支持Mac、 、 支持 Windows网络访问控制NAC Advanced ES1000 ES50005万邮件 小时 万邮件/小时 万邮件 38万邮件 小时 万邮件/小时 万邮件 55万邮件 小时 万邮件/小时 万邮件反垃圾邮件网关ES8000 邮件安全软件 for Unix/Exchange/Notes反垃圾邮件、病毒、间谍邮件、 反垃圾邮件、病毒、间谍邮件、邮件内容过滤网页安全网关 数据保护产品WS500 WS1000 WS1100 SafeGuard Enterprise网页过滤、病毒、间谍软件、网站访问控制、 网页过滤、病毒、间谍软件、网站访问控制、 广告及应用控制 硬盘加密，文件加密，邮件加密， 盘加密和 硬盘加密，文件加密，邮件加密，U盘加密和 控制1U机箱 机箱5Sophos端点安全产品 端点安全产品Endpoint Security and Control6安全风险日渐升高变化迅速的安全环境 从前 恶作剧 现在 有金钱目的 网络边界正在瓦解简单有智慧散播缓慢散播快速无特定对象有明确目标终端计算机是安全防护最脆弱的一环7Sophos端点安全与控制 端点安全与控制防病毒 主动防御 (HIPS) 反间谍软件 流氓程序 网络访问控制 (NAC)Web Security and Control一个产品完成端点评估、 一个产品完成端点评估、控制和防护Email Security and ControlEndpoint Security and Control管理、控制应用程序 P2P， 盘等) 管理、控制应用程序 (VoIP, IM, P2P，U盘等) 个人防火墙 个人防火墙悉尼 牛津 波士顿 波士顿 温哥华 病毒 分析 间谍软件 间谍软件 分析 行为 分析 弱点 分析Sophos NAC Advanced垃圾邮 垃圾邮件 分析应用程序 分析网页 分析 8端点安全产品特性 Sophos 端点安全产品特性一个License支持所有功能 一个License支持所有功能 License 支持全球最广泛的操作系统， 2003,2008， 支持全球最广泛的操作系统，如：Windows Vista, XP, 2003,2008，NT, 95/98/Me, MAC, 十种操作系统，无须额外付费。

内容关于本帮助 (1)关于 Sophos Mobile (2)关于 Sophos Mobile Admin (3)仪表板 (3)表格视图 (4)前提条件 (4)用户角色 (4)更改您的密码 (5)密码恢复 (5)使用 Sophos Mobile 管理设备的主要步骤 (7)报告 (8)任务 (9)监视任务 (9)警报 (12)安装 (13)配置个人设置 (13)配置密码策略 (13)配置 SMC 应用设置 (14)配置电子邮件 (14)配置 IT 部门联系人 (15)配置隐私设置 (15)配置 iOS 设置 (16)Apple 推送通知服务证书 (16)配置 iOS AirPlay 目标 (19)Android 设置 (19)设置 Android 管理模式 (20)在您的 Web 服务器上托管 Sophos 应用 (20)配置 Sophos Mobile Control 应用的同步间隔 (21)启用百度云推送服务 (21)注册 Samsung Knox 许可证 (21)配置 Windows 设备的轮询间隔 (22)检查您的许可证 (22)简单证书注册协议 (SCEP) (22)创建客户属性 (23)配置 SSL/TLS 证书 (24)配置 EAS 代理 (24)配置网络访问控制 (24)配置电子邮件服务器连接 (24)配置代理服务器连接 (24)配置门户访问权限 (24)配置文件上传限制 (25)开启审核日志 (25)创建系统消息 (25)配置自助服务门户 (26)配置自助服务门户设置 (26)创建注册文本 (27)可用的自助服务门户操作 (28)合规性策略 (31)创建合规性策略 (31)可用的合规性规则 (32)将合规策略分配到设备组 (37)检查设备合规性 (37)设备 (38)添加设备 (38)注册设备 (39)取消设备注册 (46)管理设备 (47)自定义设备属性 (58)Zero-touch 注册 (59)Knox Mobile Enrollment (62)Apple DEP (64)Duo Security 集成 (74)TeamViewer 远程控制 (75)设备组 (77)创建设备组 (77)删除设备组 (77)用户 (78)配置自助服务门户用户管理 (79)配置外部目录连接 (80)联合身份验证 (81)配置 LDAP 连接 (83)创建用户 (83)导入用户 (84)创建用户组 (84)配置文件和策略 (86)开始使用设备策略 (87)创建配置文件或策略 (87)导入用 Apple Configurator 创建的 iOS 设备配置文件 (88)导入 iOS 应用的设置配置文件 (89)关于 macOS 策略 (89)Windows 密码复杂性规则 (90)Samsung Knox 支持 (90)配置文件和策略中的占位符 (91)在设备上安装配置文件 (91)向设备分配策略 (92)卸载配置文件 (92)下载配置文件和策略 (93)Android 设备配置文件的配置 (93)Android 企业工作配置文件策略的配置 (109)Android 企业设备策略的配置 (120)Android 的 Sophos 容器策略的配置 (132)Android 的 Mobile Security 策略的配置 (141)Knox 容器配置文件的配置 (144)Android Things 策略的配置 (148)iOS 设备配置文件的配置 (148)iOS 的 Sophos 容器策略的配置 (175)iOS 的 Mobile Security 策略的配置 (183)macOS 设备策略的配置 (185)macOS 用户策略的配置 (199)Windows Mobile 策略的配置 (215)Windows 策略的配置 (224)Windows IoT 策略的配置 (234)任务捆绑包 (237)创建任务捆绑包 (237)可用的 Android 任务类型 (238)可用的 iOS 任务类型 (241)可用的 macOS 任务类型 (243)可用的 Windows 任务类型 (244)复制任务捆绑包 (246)将任务捆绑包传输至个人设备或设备组 (246)应用程序 (247)添加应用 (247)安装应用 (248)卸载应用 (249)应用设置 (Android) (250)应用设置 (iOS) (252)应用设置 (macOS) (254)应用设置 (Windows Mobile) (255)应用设置 (Windows) (256)确定 Windows MSI 链接的设置 (257)iOS 的托管应用 (258)管理 Apple VPP 应用 (258)将 VPN 连接分配给 iOS 应用 (263)将托管应用配置添加到 iOS 应用 (263)应用组 (265)创建应用组 (265)导入应用组 (266)企业文档 (268)添加公司文档 (268)Android 企业 (270)设置 Android 企业 - 概述 (270)设置 Android 企业（托管 Google Play 帐户方案） (271)设置 Android 企业（托管 Google 域方案） (272)配置 Android 企业设备注册 (275)管理 Android 企业用户（托管 Google 网域方案） (276)创建工作配置文件 (277)锁定工作配置文件 (277)从设备删除工作配置文件 (278)用户启动的工作配置文件删除 (278)Android 恢复出厂设置保护 (278)托管的 Google Play 应用 (280)Intune 应用保护 (286)设置 Microsoft Intune 集成 (286)创建 Intune 应用保护策略 (287)将应用分配给 Intune 应用保护策略 (287)将用户分配给 Intune 应用保护策略 (287)Intune 应用保护策略设置 (Android) (288)Intune 应用保护策略设置 (iOS) (292)管理 Sophos Mobile Security (296)Sophos Mobile Security 合规性规则 (296)配置第三方 EMM 集成 (298)创建管理员 (300)向设备发送消息 (301)Sophos 容器 (302)配置 Sophos 容器注册 (302)Mobile Advanced 许可证 (302)管理 Sophos 容器应用 (303)重置 Sophos 容器密码 (304)锁定和解锁 Sophos 容器 (304)企业 Keyring 同步 (305)将内容传递到 Sophos Central (306)导出内容 (306)导入内容 (306)用语表 (308)技术支持 (309)法律声明 (310)Sophos Mobile1 关于本帮助本帮助提供了有关Sophos Mobile Admin管理控制台的信息，并对操作程序进行了详细解释。

Sophos UTM Feature ListGeneral ManagementÌCustomizable dashboardÌRole-based administration: Auditor, read-only and manager for all functionsÌNo-charge, centralized management of multipleUTMs via Sophos UTM Manager (SUM)ÌConfigurable update serviceÌReusable system object definitions for networks, services, hosts, time periods, users and groups, clients and servers ÌPoint & Click IPS rule managementÌSelf-service user portal for one-click VPN setupÌConfiguration change trackingÌManual or fully automated backup and restore optionsÌEmail or SNMP trap notification optionsÌSNMP supportÌOne-time password (OTP) / Two-factor authentication(2FA) supports OATH protocol for WebAdmin, User Portal, SSL VPN, IPSec VPN, HTML5 Portal and SSH Login*ÌOne-click secure access for Sophos customer support** Network Routing and ServicesÌRouting: static, multicast (PIM-SM)and dynamic (BGP, OSPF)ÌNAT static, masquerade (dynamic)ÌP rotocol independent multicast routing with IGMP snooping ÌBridging with STP support and ARP broadcast forwarding ÌW AN link balancing: 32 Internet connections, auto-link health check, automatic failover, automatic andweighted balancing and granular multipath rulesÌZ ero-config active/passive high- availabilityÌA ctive/active clustering for up to 10 appliancesÌ802.3ad interface link aggregationÌQoS with full control over bandwidth pools anddownload throttling using Stochastic Fairness Queuingand Random Early Detection on inbound trafficÌF ull configuration of DNS, DHCP and NTPÌS erver load balancingÌI Pv6 supportÌR ED supportÌVLAN DHCP support and tagging**ÌMultiple bridge support**Network ProtectionÌStateful deep packet inspection firewallÌIntrusion protection: Deep packet inspectionengine, 18,000+ patternsÌSelective IPS patterns for maximumperformance and protectionÌIPS pattern aging algorithm for optimal performance*ÌFlood protection: DoS, DDoS and portscan blockingÌCountry blocking by region or individual country(over 360 countries) with separate inbound/outbound settings and exceptionsÌSite-to-site VPN: SSL, IPSec, 256- bit AES/3DES,PFS, RSA, X.509 certificates, pre-shared keyÌRemote access: SSL, IPsec, iPhone/iPad/Cisco VPN client supportÌVoIP handling for SIP and H.323 connectionsÌConnection tracking helpers: FTP, IRC, PPTP, TFTPÌIdentity-based rules and configuration withAuthentication Agent for usersAdvanced Threat Protection*ÌDetect and block network traffic attempting tocontact command and control servers usingDNS, AFC, HTTP Proxy and firewallÌIdentify infected hosts on the network Sandstorm Protection***ÌCloud-based sandbox to detect, block and gain visibility into evasive zero-day targeted attacks in active content such as executables, PDFs, Office Documents, and more ÌPreviously unseen suspicious files aredetonated in the cloud-sandbox and monitoredbefore being released to the end-userÌComplete reporting on all suspicious file activityincluding detailed sandbox analysis results AuthenticationÌTransparent, proxy authentication (NTLM/Kerberos) or client authenticationÌAuthentication via: Active Directory, eDirectory,RADIUS, LDAP and TACACS+ÌSingle sign-on: Active directory, eDirectoryÌSophos Transparent Authentication Suite (STAS)provides AD agent for transparent reliable SSOauthentication with Microsoft Active Directory***ÌSSL supportÌTools: server settings check, username/passwordtesting and authentication cache flushÌGraphical browser for users and groupsÌAutomatic user creationÌScheduled backend synchronization prefetchÌComplex password enforcementWeb ProtectionÌURL Filter database with 35 million+ sitesin 96 categories and 65+ languagesÌApplication Control: Accurate signatures andLayer 7 patterns for thousands of applicationsÌDynamic application control based onproductivity or risk thresholdÌView traffic in real-time, choose to block or shapeÌMalware scanning: HTTP/S, FTP and web-based email via dual independent antivirus engines (Sophos & Avira) block all forms of viruses, web malware, trojans and spywareÌFully transparent HTTPS filtering of URLs*ÌOption for selective HTTPS Scanning of untrusted sites**ÌAdvanced web malware protectionwith JavaScript emulation*ÌLive Protection real-time in-the-cloud lookupsfor the latest threat intelligenceÌPotentially unwanted application (PUA) download blocking*ÌMalicious URL reputation filtering backed by SophosLabs ÌReputation threshold: set the reputation threshold awebsite requires to be accessible from internal networkÌActive content filter: File extension, MIME type,JavaScript, ActiveX, Java and FlashÌTrue-File-Type detection/scan within archive files**ÌYouTube for Schools enforcementÌSafeSearch enforcementÌGoogle Apps enforcement*Web PolicyÌAuthentication: Active Directory, eDirectory,LDAP, RADIUS, TACACS+ and local databaseÌSingle sign-on: Active Directory,eDirectory, Apple Open DirectoryÌProxy Modes: Standard, (Fully) Transparent, Authenticated, Single sign-on and Transparent with AD SSO*ÌTransparent captive portal with authenticationÌSupport for separate filtering proxies in different modesÌTime, user and group-based access policiesÌBrowsing quota time policies and quota reset option**ÌAllow temporary URL filter overrides with authentication ÌClient Authentication Agent for dedicated per-user tracking ÌCloning of security profilesÌCustomizable user-messages for events in local languages ÌCustom HTTPS verification CA supportÌSetup wizard and context sensitive online helpÌCustomizable block pagesÌCustom categorization to override categoriesor create custom categories*ÌSite tagging for creating custom site categories**ÌAuthentication and filtering options by device typefor iOS, Android, Mac, Windows and others*ÌPolicy testing tool for URLs, times,users and other parameters*Email ProtectionÌReputation service with spam outbreak monitoring based on patented Recurrent-Pattern-Detection technologyÌAdvanced spam detection techniques: RBL, heuristics,SPF checking, BATV, URL scanning, grey listing, RDNS/HELO checks, expression filter and recipient verification ÌBlock spam and malware during the SMTP transaction ÌDetects phishing URLs within e-mailsÌGlobal & per-user domain and address black/white lists ÌRecipient Verification against Active Directory accountÌE-mail scanning with SMTP and POP3 supportÌDual antivirus engines (Sophos & Avira)ÌTrue-File-Type detection/scan within archive files**ÌScan embedded mail formats: Block maliciousand unwanted files with MIME type checkingÌQuarantine unscannable or over-sized messagesÌFilter mail for unlimited domains and mailboxesÌAutomatic signature and pattern updatesÌSophos Live Anti-Virus real-time cloud lookups** Email Encryption and DLPÌPatent-pending SPX encryption for one-way message encryption*ÌRecipient self-registration SPX password management**ÌAdd attachments to SPX secure replies**ÌTransparent en-/decryption and digitalsigning for SMTP e-mailsÌCompletely transparent, no additionalsoftware or client requiredÌSupports S/MIME, OpenPGP, and TLS standardsÌPGP key server supportÌAllows content/virus scanning even for encrypted e-mails ÌCentral management of all keys and certificates- no key or certificate distribution requiredÌDLP engine with automatic scanning of emailsand attachments for sensitive data*ÌPre-packaged sensitive data type contentcontrol lists (CCLs) for PII, PCI, HIPAA, andmore, maintained by SophosLabs*Email ManagementÌUser-quarantine reports mailed outdaily at customizable timesÌLog Management service supportÌCustomizable User Portal for end-usermail management, in 15 languagesÌAnonymization of reporting data to enforce privacy policy ÌOver 50 Integrated reportsÌPDF and CSV exporting of reportsÌCustomizable email footers and disclaimersÌSetup wizard and context sensitive online helpÌEmail header manipulation support**End-User PortalÌSMTP quarantine: view and releasemessages held in quarantineÌSender blacklist/whitelistÌHotspot access informationÌDownload the Sophos Authentication Agent (SAA)ÌDownload remote access clientsoftware and configuration filesÌHTML5 VPN portal for opening clientless VPN connections to predefined hosts using predefined servicesÌDownload HTTPS Proxy CA certificatesVPNÌPPTP, L2TP, SSL, IPsec, HTML5-based and Ciscoclient-based remote user VPNs, as well as IPsec, SSL,Amazon VPC-based site-to-site tunnels and SophosRemote Ethernet Device (RED) plug-and-play VPNÌIPv6 SSL VPN support***VPN IPsec ClientÌAuthentication: Pre-Shared Key (PSK), PKI(X.509), Smartcards, Token and XAUTHÌEncryption: AES (128/192/256), DES, 3DES(112/168), Blowfish, RSA (up to 2048 Bit), DHgroups 1/2/5/14, MD5 and SHA-256/384/512ÌIntelligent split-tunneling for optimum traffic routingÌNAT-traversal supportÌClient-monitor for graphical overview of connection status ÌMultilingual: German, English and FrenchÌIPsec Tunnel BindingVPN SSL ClientÌProven SSL-(TLS)-based securityÌMinimal system requirementsÌProfile support for varying levels of accessÌSupports MD5, SHA, DES, 3DES and AESÌWorks through all firewalls, regardless of proxies and NAT ÌSupport for iOS and AndroidClientless VPNÌTrue clientless HTML5 VPN portal for accessingapplications securely from a browser on any device VPN One-ClickÌEasy setup and installations of every client within minutes ÌDownload of client-software, individual configurationfiles, keys and certificates one click away fromthe Security Gateway end-user portalÌAutomatic installation and configuration of the clientÌNo configuration required by end userVPN REDÌCentral Management of all REDappliances from Sophos UTMÌNo configuration: Automatically connectsthrough a cloud-based provisioning serviceÌSecure encrypted tunnel using digital X.509certificates and AES256- encryptionÌRED sites are fully protected by the Network, Weband Mail security subscriptions of the Central UTM.ÌVirtual Ethernet for reliable transfer ofall traffic between locationsÌIP address management with centrally definedDHCP and DNS Server configurationÌRemotely de-authorize RED devicesafter a select period of inactivityÌCompression of tunnel traffic* (RED50, RED 10 revision 2, 3)ÌVLAN port configuration options* (RED 50)ÌSupport for RED 15w with integrated 802.11n WiFi AP*** Secure Wi-FiÌSimple plug-and-play deployment,automatically appearing in the UTMÌCentral monitor and manage all access points (APs) and wireless clients through the built-in wireless controller ÌIntegrated security: All Wi-Fi traffic isautomatically routed through the UTMÌWireless 802.11 b/g/n at 2.4 GHz and 5GHz (AP 50)ÌPower-over-Ethernet 802.3af (AP 30/50)ÌMultiple SSID support: Up to 8ÌStrong encryption supports state-of-the-artwireless authentication including WPA2-Enterpriseand IEEE 802.1X (RADIUS authentication)ÌWireless guest Internet access with customizablesplash pages on your captive portalÌVoucher-based guest access for daily or weekly access ÌTime-based wireless network accessÌWireless repeating and bridging meshednetwork mode with AP 50ÌHotspot backend authentication support*(RADIUS, TACACS, LDAP, AD)ÌAutomatic channel selection background optimization**ÌMulti-tenant hotspot administration**ÌSupport for HTTPS login support**Web Application Firewall ProtectionÌReverse proxyÌURL hardening engineÌForm hardening engineÌDeep-linking controlÌDirectory traversal preventionÌSQL injection protectionÌCross-site scripting protectionÌDual-antivirus engines (Sophos & Avira)ÌHTTPS (SSL) encryption offloadingÌCookie signing with digital signaturesÌPath-based routingÌOutlook anywhere protocol supportÌReverse authentication (offloading) for form-basedand basic authentication for server access*ÌPersistent session cookie support***Web Application Firewall ManagementÌAuto server discovery scans attachednetworks and identifies web serversÌIntegrated load balancer spreadsvisitors across multiple serversÌPredefined firewall profiles for MicrosoftOutlook Web Access (OWA)ÌQuick server switch allows easy maintenanceÌSkip individual checks in a granular fashion as required ÌMatch requests from source networksor specified target URLsÌSupport for logical and/or operatorsÌAssists compatibility with various configurationsand non-standard deploymentsÌOptions to change WAF performance parameters**ÌUpload custom WAF rules**ÌScan size limit option**ÌAllow/Block IP ranges**ÌWildcard support for server paths**ÌAutomatically append a prefix/suffix for authentication** UTM Endpoint ProtectionÌWindows endpoint protection with SophosAntivirus and device controlÌOn-access, on-demand or scheduled scanningfor malware, viruses, spyware and TrojansÌPUA scanningÌLive Protection Antivirus provides real-time, in-the-cloud lookups for the latest threat intelligenceÌHIPS with suspicious behavior detectionÌWeb protection with malicious site protectionÌDownload scanningÌDevice control including removable storage, optical media, modems, Bluetooth, wireless, infrared and more * New in UTM Accelerated (9.2)** New in UTM Advantage (9.3)*** New in UTM Elevated (9.4)ÌWeb in Endpoint enforcement of web policy and webmalware scanning on the endpoint with full policyand reporting synchronization with the UTMUTM Endpoint ManagementÌFully managed within the UTMÌEasy deployment from the UTM using using our installer ÌMonitor connected endpoints, threat statusand device utilization with full log accessÌAlerts for infected endpoints*SEC Endpoint Integration*ÌI ntegration with Sophos Enterprise ConsoleEndpoint Management provides UTM webpolicy and reporting for Web in EndpointLogging and ReportingÌLogging: Remote syslog, nightly rotation, email/ftp/SMB/SSH archiving and log management serviceÌOn-box reporting: Packet filter, intrusion protection,bandwidth and day/week/month/year scalesÌIdentity-based reportingÌPDF or CSV report exportingÌE xecutive report scheduling and archivingÌR eactive reporting engine crafts reports as you click on data ÌS ave, instantly email or subscribe recipients to any reports ÌP DF and CSV exporting of reportsÌN ightly compression and rotation of logsÌL og file archiving: On-box, FTP, SMB, SSH, Email and Syslog ÌH undreds of on-box reportsÌD aily activity reportingÌU RL filter override reportÌP er-user tracking and auditingÌA nonymization of reporting data to enforce privacy policy ÌF ull transaction log of all activity in human-readable formatUnited Kingdom and Worldwide Sales Tel: +44 (0)8447 671131Email:****************North American SalesToll Free: 1-866-866-2802Email:******************Australia and New Zealand SalesTel: +61 2 9409 9100Email:****************.auAsia SalesTel: +65 62244168Email:********************Oxford, UK | Boston, USA© Copyright 2016. Sophos Ltd. All rights reserved.Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.1129-02.13DD.dsna.simple。

牙科X射线机ORTHOPHOS XG 5 DS CEPH操作指南简体中文德国西诺德牙科设备有限公司ORTHOPHOS XG 5 DS / Ceph 操作指南60 04 746 D3352 D3352.201.03.09.022概要亲爱的客户：维修保养： 欣悉阁下购置新型牙科X 射线机ORTHOPHOS XG 。

采用数码成像技术拍摄标准视图（颌部），鼻窦视图（上颌窦区）以及颞下颌关节视图已成为可能。

如果该系统配备侧位单元延长臂，您还可以利用数码成像技术获得头部测量图像。

兹特奉上本机技术资料一套，以便随时、迅速查阅之需。

为维护阁下的保修权，请在设备安装之后与技术服务工程是一同填写随机附带的“安装协议/保修卡”进行登记。

请在对患者进行X 光拍摄前详细阅读本操作指南以熟悉本机。

遵守辐射防护守则以及安全须知。

本操作指南与SIDEXIS 软件非常类似。

根据德意志联邦共和国X 光相关法令规定，X 光系统用户必须对设备定期执行稳定性测试，以确保患者和操作人员的安全。

ORTHOPHOS XG 5机组为确保患者、操作者以及第三方的安全和健康，必须定期进行设备检测及预防性维修，以确保设备操作安全及功能可靠（执行IEC 601-1 / DIN EN 60601-1等标准）。

操作者有责任确认检测维修工作的执行。

一旦操作者忘记履行执行检测维修的义务，或者忽略了错误信息，由此造成的设备损坏，德国西诺德牙科设备有限公司及其授权经销商不承担责任。

注册证号：国食药监械（进）字2008第2303722号 标准编号：YZB/GEM 4911-2008售后服务：西诺德牙科设备商贸（上海）有限公司德国西诺德牙科设备有限公司ORTHOPHOS XG 5 DS / Ceph操作指南60 04 746 D3352D3352.201.03.01.023 目录1警示标志和安全信息 (5)1.1安全信息概述 (5)1.2ESD保护措施 (8)1.3关于静电放电的物理性质 (9)2技术说明 (10)3控制器和功能组件 (14)3.1控制器和显示屏 (14)4全景单元附件 (17)4.1支座和支架 (17)4.2插入颞下颌关节支架的要点 (18)4.3全景单元防护罩 (19)4.4侧位单元防护罩 (20)5全景单元程序组 (21)5.1P1标准全景视图 (21)5.2P1L标准全景视图—左半侧 (22)5.3P1R标准全景视图—右半侧 (23)5.4P1A标准全景视图—伪影消减 (24)5.5P1C1.25倍固定放大倍率标准全景视图 (25)5.6P10大幅降低辐射剂量专用于儿童的标准视图 (26)5.7P12断层厚度——前牙区 (27)5.8TM1.1/TM1.2闭口位与张口位在同一图像中显示的颞下颌关节侧视图 (28)5.9S1副鼻窦 (29)5.10TS1轴向加厚断层（后牙区） (30)6操作 (31)6.1照射准备 (31)6.2患者定位 (33)6.3准备完毕（全景视图） (41)6.4设置照射参数 (42)6.5重新编程设置K V/M A匹配值 (42)6.6触发照射 (43)6.7遥控器 (45)7侧位照射（侧位） (46)7.1侧位照射准备（侧位程序） (46)7.2侧位单元准备 (48)7.3对侧位患者进行定位 (49)7.4触发侧位照射 (54)8信息与技术支持菜单 (56)8.1信息菜单 (56)8.2技术支持菜单 (56)9程序值 (57)德国西诺德牙科设备有限公司ORTHOPHOS XG 5 DS / Ceph 操作指南60 04 746 D3352D3352.201.03.09.0249.1 全景视图——列表2A 程序值 ················································································· 57 9.2 全景视图——列表4A 程序值 ················································································· 58 9.3 侧位图像程序值 ·································································································· 59 9.4 头部测量图像程序值 ···························································································· 60 10信息列表 (61)10.1 帮助信息列表 (61)10.2 错误信息格式 ..................................................................................................... 62 10.2.1 错误信息代码具有下列格式 ......................................................................................................... 62 10.2.2 Ex ..................................................................................................................................................... 62 10.2.3 yy ...................................................................................................................................................... 63 10.2.4 zz ...................................................................................................................................................... 63 11 外表面处理 ........................................................................................................ 64 12 检测及维修 ........................................................................................................ 65 12.1 由操作人员或其他经过授权的人员执行年度检查 ........................................................ 65 12.2 由技术服务工程师进行维修保养 ............................................................................. 65 12.3 检查图像质量 .. (65)德国西诺德牙科设备有限公司ORTHOPHOS XG 5 DS / Ceph操作指南60 04 746 D3352D3352.201.03.01.02 51警示标志和安全信息1.1 安全信息概述识别警示标志和安全信息符号使用预期使用保养与维修系统改造与其他设备相组合通风孔对患者进行X光照射为防止人员伤害及设备损坏，您必须阅读本操作指南中的安全须知。