AI Defense setup

Early Access Program

This product is currently in an Early Access Program (EAP). Register for the EAP.

AI Defense is available only in Sophos Fusion accounts that have been upgraded to the new platform with Security Operations. See Sophos XDR and MDR: Your Solution Upgrade.

The first time you access AI Defense, an assistant guides you through setup.

The assistant helps you do as follows:

Select the sensors which send data about AI activity to AI Defense. The sensors can be Sophos Endpoint, Sophos Firewall, or other products.
Select the devices where you want to try AI Defense.
Check that your sensors meet the requirements for using AI Defense. If any requirements are missing, follow the links to the settings you need.

When setup is complete, the assistant creates your first policy for controlling which AI apps your users can use.

Go to My Products > AI Defense.
In Set up AI Defense, click Get started.
In Tell us about your organization, enter details about the primary user's AI knowledge and the organization's size so that we can tailor the setup experience.
In Choose your sensors, select the Sophos sensors that AI Defense will use to see AI usage on your network. Currently, Sophos Endpoint and Sophos Firewall are available. Click Continue.
In Manage devices, select the devices that you want to include in the Early Access Program, then click Save.
Now you check that your sensors meet the requirements for AI Defense.

If you selected Sophos Endpoint, confirm that you enrolled devices in the Early Access Program. Then go down the page to see the required settings for Sophos Endpoint.

If any settings aren't on, click Take me to settings to turn them on. If you need help, click Learn more.

Click the checkbox next to each setting to confirm that it's set up.
When you complete all the requirement checks for all your sensors, the Turn on protection page opens.

This page shows you AI apps used in your organization in the past 30 days and suggests whether you should block, allow, or warn about them. You can change the settings.

When you've edited the settings, you can click Create policy and finish. Alternatively, you can skip this step.
If you chose to create a policy, its details page opens.

The policy isn't active yet. To use it, do as follows:
- Complete the Scope section to specify the users, groups, or networks the policy will apply to.
- Activate the policy using the toggle on the right.