{"id":90670,"date":"2022-11-11T14:37:00","date_gmt":"2022-11-11T13:37:00","guid":{"rendered":"https:\/\/www.avanet.com\/shop\/sophos-central-managed-detection-and-response\/"},"modified":"2024-04-19T08:13:37","modified_gmt":"2024-04-19T07:13:37","slug":"sophos-central-managed-detection-and-response","status":"publish","type":"product","link":"https:\/\/www.avanet.com\/en\/shop\/sophos-central-managed-detection-and-response\/","title":{"rendered":"Sophos Central Managed Detection and Response Essentials"},"content":{"rendered":"
\n
<\/div>\n\n
<\/div>\n
\n
\n
\n\nDescription<\/a>\n\n\n\nServices<\/a>\n\n\n\nResources<\/a>\n\n\n\nTrial version<\/a>\n\n\n\nHelp with purchase<\/a>\n\n<\/div>\n<\/div>\n<\/div>
\n\n

<\/path> <\/svg><\/span>Description<\/span><\/p>\n\n\n\n

Sophos Managed Detection and Response \u2013 Artificial intelligence mixed with human expertise<\/strong><\/h2>\n\n\n\n

With \u201cSophos Central MDR\u201d you can achieve the highest level of security Sophos can currently offer for the protection of your endpoints (macOS 10.15+, Windows 8.1+). In this bundle, you get all the features of Intercept X Advanced with XDR<\/a> and the new, enhanced MDR service.<\/p>\n\n\n\n

Active threat response by a team of experts \u2013 24\/7<\/strong><\/h3>\n\n\n\n

With the MDR service, Sophos provides a highly available \u201cService Operation Center\u201d (SOC). It is the perfect complement for all IT administrators where there are no free resources to go threat hunting themselves with XDR's tools. It takes highly skilled and specialized personnel to use XDR<\/a> to proactively scan the network for potential threats and take the correct steps when an attack occurs.With Sophos Central MDR for Server, you no longer need to look for trained personnel yourself. Sophos provides a team of experts who work 24\/7 to combat threats.<\/p>\n\n\n\n

Features<\/strong> of MDR<\/h2>\n\n\n\n

24\/7 circumstantial threat hunting<\/h3>\n\n\n\n

If something has been detected on your system that could not be fixed automatically and requires human expertise, the MDR team is there for you on a 24\/7 basis. An expert then takes a close look at the critical note and uses his experience to decide what needs to be done.<\/p>\n\n\n\n

Attack detection<\/h3>\n\n\n\n

The MDR team pays special attention to attacks executed through legitimate processes, such as PowerShell. Such attacks are often successful because they are difficult for monitoring tools to detect. The MDR team uses proprietary analytics to monitor these processes to ensure they are not being misused for malicious purposes.<\/p>\n\n\n\n

Security Health Check<\/h3>\n\n\n\n

The Security Health Check ensures that your Sophos Central products can always operate at maximum performance. To do this, the MDR team looks at your network requirements and makes recommendations for configuration changes.<\/p>\n\n\n\n

Activity Reports<\/h3>\n\n\n\n

You will learn the current state of your systems, what intelligence was gathered during the reporting period, and what threats were averted. A histogram of these reports is then created over the period where you use the MDR service. With the help of this data, Sophos creates so-called \"scorecards\", with which one can compare oneself to previous periods.<\/p>\n\n\n\n

Onboarding process<\/strong> with maximum control and transparency<\/h2>\n\n\n\n

Regardless of whether you choose the normal MDR or MDR Complete variant, you retain control over how autonomously the MDR team should operate. This is regulated right at the beginning in the so-called onboarding process<\/strong>. When you purchase the Sophos MDR service, you can choose from three options that determine what response you expect from the MDR team:<\/p>\n\n\n\n

Notification<\/h3>\n\n\n\n

At this level, if the Sophos MDR team has detected a threat case or an attack, it will only inform you about it, but will not take action for you on its own. However, you will get a detailed report about the cause and detection with actionable steps to fix the threat manually.<\/p>\n\n\n\n

Cooperation<\/h3>\n\n\n\n

The Sophos MDR team works with your IT team or even an external consulting firm to respond to the appropriate threats.<\/p>\n\n\n\n

Authorization<\/h3>\n\n\n\n

Here, the MDR team takes care of containment and neutralization actions completely independently and only informs you about the measures taken.<\/p>\n\n\n\n

Included integrations - no additional costs<\/strong><\/h2>\n\n

Security data from the following sources can be integrated free of charge for use by the Sophos MDR team. Telemetry sources are used to increase the visibility of your environment, generate new threat detections, and improve the reliability of existing threat detections.<\/p>\n

\n
\n\n

<\/path> <\/clippath> <\/path> <\/path> <\/path> <\/g> <\/svg><\/span>Sophos XDR<\/span><\/h2>\n\n\n\n

The only XDR platform that combines native endpoint, Server, firewall, cloud, email, mobile and Microsoft integrations.<\/p>\n\n\n\n

Included in Sophos MDR and Sophos MDR Complete pricing.<\/p>\n\n<\/div>\n\n

\n\n

<\/path> <\/svg><\/span>Sophos Firewall<\/span><\/h2>\n\n\n\n

Monitor and filter inbound and outbound network traffic to stop advanced threats before they can cause damage.<\/p>\n\n\n\n

The product is sold separately; it is integrated at no extra charge.<\/p>\n\n<\/div>\n\n

\n\n

<\/path> <\/clippath> <\/path> <\/path> <\/g> <\/svg><\/span>Sophos Endpoint Protection<\/span><\/h2>\n\n\n\n

Block advanced threats and detect malicious behavior - including attackers posing as legitimate users.<\/p>\n\n\n\n

Included in Sophos MDR and Sophos MDR Complete pricing.<\/p>\n\n<\/div>\n\n

\n\n

<\/path> <\/svg><\/span>Sophos Email\u200b<\/span><\/h2>\n\n\n\n

Protect your inbox from malware and benefit from advanced AI that prevents targeted identity deception and phishing attacks.<\/p>\n\n\n\n

The product is sold separately; it is integrated at no extra charge.<\/p>\n\n<\/div>\n\n

\n\n

<\/path> <\/clippath> <\/path> <\/path> <\/g> <\/svg><\/span>Sophos Cloud<\/span><\/h2>\n\n\n\n

Stop cloud attacks and get visibility into your critical cloud services, including AWS, Azure, and Google Cloud Platform.<\/p>\n\n\n\n

The product is sold separately; it is integrated at no extra charge.<\/p>\n\n<\/div>\n\n

\n\n

<\/path> <\/path> <\/g> <\/svg><\/span>90-Days Data Retention<\/span><\/h2>\n\n\n\n

Stores data from all Sophos products and all third-party (non-Sophos) products in the Sophos Data Lake.<\/p>\n\n\n\n

Included in Sophos MDR and Sophos MDR Complete pricing.<\/p>\n\n<\/div>\n\n

\n\n

<\/path> <\/path> <\/path> <\/path> <\/svg><\/span>Microsoft Graph Security\u200b<\/span><\/h2>\n\n\n\n
    \n
  • Microsoft Defender for Endpoint<\/li>\n\n\n\n
  • Microsoft Defender for Cloud<\/li>\n\n\n\n
  • Microsoft Defender for Cloud Apps<\/li>\n\n\n\n
  • Microsoft Defender for Identity<\/li>\n\n\n\n
  • Identity Protection (Azure AD)<\/li>\n\n\n\n
  • Microsoft Azure Sentinel<\/li>\n\n\n\n
  • Office 365 Security and Compliance Center<\/li>\n\n\n\n
  • Azure Information Protection<\/li>\n<\/ul>\n\n<\/div>\n\n
    \n\n

    <\/path> <\/path> <\/path> <\/path> <\/svg><\/span>Office 365 Management Activity<\/span><\/h2>\n\n\n\n

    Provides information about user, admin, system, and policy actions and events from Office 365 and Azure Active Directory activity logs<\/p>\n\n<\/div>\n\n

    \n\n

    <\/path> <\/clippath> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/g> <\/svg><\/span>Third-Party Endpoint Protection<\/span><\/h2>\n\n\n\n

    Compatible with ...<\/p>\n\n\n\n

      \n
    • Microsoft<\/li>\n\n\n\n
    • CrowdStrike<\/li>\n\n\n\n
    • SentinelOne<\/li>\n\n\n\n
    • Check Point<\/li>\n\n\n\n
    • Trend Micro<\/li>\n\n\n\n
    • BlackBerry (Cylance)<\/li>\n\n\n\n
    • McAfee<\/li>\n\n\n\n
    • Malwarebytes<\/li>\n<\/ul>\n\n<\/div>\n<\/div>\n

      Add-on integrations<\/strong><\/h2>\n\n

      Security data from the following third-party sources can be integrated into the Sophos MDR operations team by purchasing Integration Packs.<\/p>\n

      \n
      \n\n

      <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/path> <\/g> <\/svg><\/span>Firewall<\/span><\/h2>\n\n\n\n

      Compatible with ...<\/p>\n\n\n\n

        \n
      • Palo Alto Networks<\/li>\n\n\n\n
      • Fortinet<\/li>\n\n\n\n
      • Check Point<\/li>\n\n\n\n
      • Cisco<\/li>\n\n\n\n
      • SonicWall<\/li>\n<\/ul>\n\n<\/div>\n\n
        \n\n

        <\/path> <\/svg><\/span>Public Cloud<\/span><\/h2>\n\n\n\n

        Compatible with ...<\/p>\n\n\n\n

          \n
        • AWS<\/li>\n\n\n\n
        • Microsoft Azure<\/li>\n\n\n\n
        • Orca Security<\/li>\n\n\n\n
        • Google Cloud<\/li>\n<\/ul>\n\n<\/div>\n\n
          \n\n

          <\/path> <\/clippath> <\/path> <\/clippath> <\/path> <\/g> <\/g> <\/svg><\/span>Identity<\/span><\/h2>\n\n\n\n

          Compatible with ...<\/p>\n\n\n\n

            \n
          • Okta<\/li>\n\n\n\n
          • Duo<\/li>\n<\/ul>\n\n<\/div>\n\n
            \n\n

            <\/path> <\/path> <\/path> <\/path> <\/g> <\/svg><\/span>Network Security<\/span><\/h2>\n\n\n\n

            Compatible with ...<\/p>\n\n\n\n

              \n
            • Darktrace<\/li>\n\n\n\n
            • Forcepoint<\/li>\n\n\n\n
            • McAfee (web gateway)<\/li>\n<\/ul>\n\n<\/div>\n\n
              \n\n

              <\/path> <\/svg><\/span>Email<\/span><\/h2>\n\n\n\n

              Compatible with ...<\/p>\n\n\n\n

                \n
              • Proofpoint<\/li>\n\n\n\n
              • Mimecast<\/li>\n<\/ul>\n\n<\/div>\n\n
                \n\n

                <\/path> <\/path> <\/g> <\/svg><\/span>1-Year Data Retention<\/span><\/h2>\n\n\n\n

                Stores data from all Sophos products and all third-party (non-Sophos) products in the Sophos Data Lake.<\/p>\n\n<\/div>\n<\/div>\n\n

                \n