Skip to content
Find out how we support MDR.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=sophos-mdr-email

Sophos Email

API

You must have the Sophos Central Email Advanced and Sophos MDR Complete licenses to use this integration.

You can integrate Sophos Email with Sophos Central so that it sends data about email events to Sophos for analysis.

Add an integration

To integrate Sophos Email with Sophos Central, do as follows:

  1. In Sophos Central, go to Threat Analysis Center and click Integrations.
  2. On the Integrations page, search for "Email".

  3. Click Sophos Email.

    Sophos Email tile.

  4. If this is the first integration you've added, we'll ask for details about your internal domains and IPs. See My domains and IPs.

    My domains and IPs pop-up.

  5. On the Sophos Email page, under Integration details, use the toggle to turn on the integration.

    Integration details with toggle.

  6. Click Save.

  7. Go back to the Integrations page. The Sophos Email tile should now show one integration, with the health status "Online".

    Sophos Email integration status.

Your data should appear in the Sophos Data Lake after validation.