Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/mdr/help/en-us/index.html?contextId=MDRGettingStarted

Getting Started

By this point, you should have completed the following tasks:

  1. Setup your Sophos Central login information (for customers new to Sophos)
  2. Activated your Sophos MDR service license
  3. Provided your authorized contacts for service communications and escalations
  4. Selected your MDR Threat Response Mode
  5. Started deploying your Sophos MDR agents

If you have not yet completed these steps, refer to our Sophos MDR Getting Started video below or the Sophos Setup Guide for step-by-step instructions. If you are still deciding which Threat Response Mode is best for your organization, more information is provided in this guide with a specific example to help. These preferences can be changed at any time.

It is highly recommended that Sophos MDR agents are deployed across your entire environment. The more visibility the MDR Ops team has, the better protection we can provide. For hands-on help with deployment and configuration, Sophos offers MDR Guided Onboarding for peace of mind that all software is configured according to best practices. To ask about MDR Guided Onboarding, reach out to your Sophos account manager.

Sophos Account Health Check

Once setup is complete, one of the first things the MDR Ops team will do is evaluate your MDR settings and provide a readout of recommended configuration changes and policy improvements to optimize your service. The health check is completed on managed endpoints running Sophos Intercept X only and reviews endpoint and server protection policies.

Sophos Success Factors Webinar

We recommend all new Sophos MDR customers attend the Sophos Success Factors webinar. This session takes attendees through a service overview and highlights key items for success. The webinar includes a review of the MDR dashboard and runs through support for both native and third-party integrations. Look out for an email communication regarding scheduling.