Set up the Sophos MTR service
Follow these instructions to set up the service.
The first time you sign in to Sophos Central after activating your account and/or license, you're prompted to configure the MTR service, as follows.
-
Go to https://central.sophos.com
and sign in with administrator rights. You see a form like this:
-
In Authorized Contacts, you
set up contacts in your organization. They must be Sophos Central admins.
- Click Create new Central administrator if you need to create admins.
- If you already have Sophos Central admins, skip to step 4.
-
In the Add User page,
do as follows:
- Enter a user's name and email address.
- In Role, select Super Admin, Admin, or Help Desk.
- Assign the user to a group.
If you use an email address that contacts a ticketing system, multiple users can use this admin account. To limit what they do, select the Help Desk role because it has the lowest privileges.
-
In the Managed Threat Response Preferences
page, enter the details of your contacts. If there’s an incident, we’ll contact
each in turn till there's a response.
- Click the drop-down arrow beside Primary and select one of your Sophos Central admins.
- Select Secondary and Tertiary contacts, if you want to (Recommended) and enter their details.
-
In Threat response mode, choose how you want us to respond to incidents. The default is Notify.
- Notify. We'll notify you about the incident and send you any details you need to resolve it yourself.
- Collaborate. We'll work with your contacts to resolve the incident. If we can't reach the contacts, we'll take action.
- Authorize. We'll take any action needed to resolve the incident, and we'll notify you.
- Click Save.
You can edit these settings at any time in Sophos Central, under Global Settings > Managed Threat Response Preferences.
Now you're ready to install the Sophos MTR software.