Skip to content
Find out how we support MDR.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=sophos-mdr-email

Sophos Email

API Sophos Central Email

You must have the Sophos Central Email license to use this integration.

You can integrate Sophos Email with Sophos Central so that it sends data about email events to Sophos for analysis.

Configure an integration

To integrate Sophos Email with Sophos Central, do as follows:

  1. In Sophos Central, go to Threat Analysis Center > Integrations > Marketplace.
  2. Search for "Email".

  3. Click Sophos Email.

    Sophos Email tile.

  4. If this is the first integration you've added, we'll ask for details about your internal domains and IPs. See Provide your domain and IP details.

    My domains and IPs pop-up.

  5. On the Sophos Email page, under Integration Details, turn on the integration.

    Integration details with toggle.

  6. Click Save.

  7. Go back to the Integrations > Marketplace page. The Sophos Email tile should now show one active integration with an "Online" health status.

    Sophos Email integration status.

Your data should appear in the Sophos Data Lake after validation.