Set up the Sophos MTR service

Follow these instructions to set up the service.

The first time you sign in to Sophos Central after activating your account and/or license, you're prompted to configure the MTR service, as follows.

  1. Go to and sign in with administrator rights. You see a form like this:

    Screenshot of MTR Preferences page
  2. In Authorized Contacts, you set up contacts in your organization. They must be Sophos Central admins.
    • Click Create new Central administrator if you need to create admins.
    • If you already have Sophos Central admins, skip to step 4.

    Screenshot of Create new Central Admin option
  3. In the Add User page, do as follows:
    1. Enter a user's name and email address.
    2. In Role, select Super Admin, Admin, or Help Desk.
    3. Assign the user to a group.

    If you use an email address that contacts a ticketing system, multiple users can use this admin account. To limit what they do, select the Help Desk role because it has the lowest privileges.

    Screenshot of Add User page
  4. In the Managed Threat Response Preferences page, enter the details of your contacts. If there’s an incident, we’ll contact each in turn till there's a response.
    1. Click the drop-down arrow beside Primary and select one of your Sophos Central admins.
    2. Select Secondary and Tertiary contacts, if you want to (Recommended) and enter their details.

    Screenshot of Authorized Contacts selector
  5. In Threat response mode, choose how you want us to respond to incidents. The default is Notify.
    • Notify. We'll notify you about the incident and send you any details you need to resolve it yourself.
    • Collaborate. We'll work with your contacts to resolve the incident. If we can't reach the contacts, we'll take action.
    • Authorize. We'll take any action needed to resolve the incident, and we'll notify you.

    Screenshot of Threat response mode options
  6. Click Save.

You can edit these settings at any time in Sophos Central, under Global Settings > Managed Threat Response Preferences.

Now you're ready to install the Sophos MTR software.