Sophos RED, Branch Office Connectivity
Sophos Remote Ethernet Device (RED) extends your corporate firewall to branch offices and remote sites over an encrypted tunnel, with zero on-site configuration required at the remote end.
Key highlights
- Plug-and-play deployment at remote sites, no IT required
- Encrypted tunnel to your central Sophos Firewall
- All remote traffic inspected by head office firewall policies
- Split tunnel or full tunnel configuration
- Centrally managed from Sophos Central
Branch offices connected without branch office IT
Connecting a remote office, warehouse, or branch site to your corporate network traditionally requires either a hardware firewall at the remote site or a VPN client on every device. Sophos RED is a third option: a small device that plugs into the remote site's internet connection and automatically creates an encrypted tunnel back to your central Sophos Firewall, requiring no configuration at the remote end and no IT presence to deploy.
Zero-touch provisioning
A Sophos RED device ships to the remote site pre-configured. The person at the remote end plugs it into a power socket and a network cable, that's it. The device calls home to Sophos Central, downloads its configuration, and the encrypted tunnel to head office is live within minutes. No IT knowledge required at the remote site.
How Sophos RED works
Encrypted tunnel to central firewall
All traffic from the remote site routes through an encrypted tunnel to your Sophos Firewall at head office. The remote site gets the same web filtering, application control, and IPS protection as your main office, without a local firewall.
Full tunnel or split tunnel
In full tunnel mode, all remote site traffic, including internet browsing, routes through head office for inspection. In split tunnel mode, corporate traffic goes via the tunnel while internet traffic breaks out locally. Sentire configures the mode that fits your security policy and bandwidth profile.
Transparent to end users
Staff at the remote site connect to the same corporate resources, file shares, internal applications, printers, as if they were in the main office. No VPN client to install or connect.
Use cases in Kenya
Sophos RED is particularly suited to businesses with multiple locations across Kenya, a head office in Nairobi and a branch in Mombasa, Kisumu, or Nakuru, or a site in an industrial park that needs access to corporate systems but has no IT staff. It's also used for warehouses, factory floors, and retail locations that need secure access to POS systems or ERP without complex networking infrastructure on-site.
Sentire provisions, ships, and monitors Sophos RED devices as part of the networking and infrastructure service, centrally managed alongside your Sophos Firewall.
Branch offices you can't staff with IT
If you have remote sites that need corporate network access but no IT person on-site, Sophos RED is the answer. Tell us how many locations you have and we'll design a solution that connects them all securely.
Also in Cybersecurity
Endpoint Protection
Sophos endpoint security deployed on every device. EDR, antivirus, behavioural analysis, and ransomware rollback managed end-to-end by Sentire.
Firewall Management
Managed Sophos XGS firewall with policy management, VPN configuration, and traffic inspection. Sentire owns the configuration so you don't have to.
Email Security
Multi-layer email protection with anti-phishing, anti-spam, and impersonation detection. Integrated with Microsoft 365 and managed by Sentire.
Sophos Managed Detection and Response
24/7 threat hunting and incident response from the Sophos MDR Operations Centre. Sentire deploys the agent and manages the relationship with Sophos Security Operations team.
Security Awareness Training
Simulated phishing campaigns and staff security training to build a security-aware culture. Human error is behind 90% of breaches.
Get it done right
Let Sentire handle your Sophos RED, Branch Office Connectivity.
Our engineers are based in Nairobi and support businesses across Kenya. No lengthy contracts. Just reliable, expert IT delivered as a service.