Set up the Sophos MTR service
Follow these instructions to set up the service.
- If you're not already signed in to Sophos Central, go to central.sophos.com and sign in.
-
Go to MTR > Settings.
Note If you've signed in for the first time after activating an account, you see a popup screen with the same options as the Settings page. Use that instead.
-
In Authorized Contacts, you
set up contacts in your organization. They must be Sophos Central admins.
- Click Create new Central administrator if you need to create admins.
- If you already have Sophos Central admins, skip to step 5.
-
In the Add User page,
do as follows:
- Enter a user's name and email address.
- In Role, select Super Admin, Admin, or Help Desk.
- Assign the user to a group.
If you use an email address that contacts a ticketing system, multiple users can use this admin account. To limit what they do, select the Help Desk role because it has the lowest privileges.
-
On the Managed Threat Response settings
page, enter the details of your contacts. If there’s an incident, we’ll contact
each in turn till there's a response.
- Click the drop-down arrow beside Primary and select one of your Sophos Central admins.
- Select Secondary and Tertiary contacts, if you want to (Recommended) and enter their details.
-
In Threat response mode, choose how you want us to respond to incidents. The default is Notify.
- Notify. We'll notify you about the incident and send you any details you need to resolve it yourself.
- Collaborate. We'll work with your contacts to resolve the incident. If we can't reach the contacts, we'll take action.
- Authorize. We'll take any action needed to resolve the incident, and we'll notify you.
- Click Save.
Now you're ready to install the Sophos MTR software.