Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/fusion/customer/help/en-us/index.html?contextId=xdr-integration-sophos-ndr

Sophos NDR

Sophos NDR (Network Detection and Response) integrates with Sophos XDR to detect malicious behavior on your network.

You must have the Sophos Network Detection and Response integration license pack to use this feature. See NDR for more information.

The integration uses a log collector hosted on a virtual machine (VM) or on hardware. Together they're called an integration appliance. The appliance receives data and forwards it to the Sophos Data Lake. The log collectors currently supported by Sophos XDR are as follows: