Shipping Policy
24/7 Customer Support
Login/Register
Book an Appointment
Related Products
Description
Unlock the full power of your Sophos ecosystem with the Sophos Firewall Integration Pack for MDR. This is an add-on license for your Sophos MDR (Managed Detection and Response) service that allows the 24/7 MDR team to access and utilize data from your Sophos XGS Firewall.
By correlating network alerts with endpoint and server data, the MDR team can detect and respond to threats with greater speed and accuracy. This integration allows the team to not only identify a threat on an endpoint, but also automatically block its C2 (command and control) traffic at the firewall, stopping an attack at the network edge.
Key Features & Benefits
- Full XDR Visibility: Provides the MDR team with network data from your firewall, completing the XDR (Extended Detection and Response) picture.
- Automated Network Response: Authorizes the MDR team to actively block malicious IPs and C2 servers at your firewall.
- Faster Detections: Correlating network and endpoint logs allows for faster and more accurate detection of advanced attacks.
- Stops Lateral Movement: Helps the MDR team identify and block attackers moving laterally across your network.
- Unified Incident Response: The MDR team can see the entire attack chain, from the initial email to the endpoint and out to the firewall.
Why Buy From Softech.store?
- ✔ Sophos Platinum Partner: We are a top-tier, authorized partner for all Sophos MDR services and add-ons.
- ✔ Holistic Security Strategy: We can ensure your firewall, endpoint, and MDR service are all configured to work together.
- ✔ Simplified Billing: Manage your core MDR subscription and all integration packs on a single, simple invoice.
Sophos MDR vs. MDR with Firewall Integration
This add-on extends the visibility and response capabilities of the Sophos MDR team to your network perimeter.
| MDR Capability | Sophos MDR (Standard) | MDR + Firewall Integration |
|---|---|---|
| Monitors Endpoint & Server Data | ✓ | ✓ |
| Monitors Firewall Data | ✗ | ✓ |
| Correlates Network & Endpoint Threats | ✗ | ✓ |
| MDR Team Can Block Threats at Firewall | ✗ | ✓ |
| Best For | Core Endpoint/Server Response | Full XDR (Network + Endpoint) Response |
FAQs for MDR Integration Packs
Q: Do I need this add-on to use Sophos MDR?
A: You can use Sophos MDR without this pack. However, standard MDR only monitors Sophos endpoints and servers. If you want the 24/7 MDR team to also monitor and respond to threats from your Sophos XGS Firewall, you must purchase this integration pack.
Q: How is this add-on licensed?
A: The integration pack is licensed to match your main Sophos MDR subscription (typically per-user) and is co-termed to end on the same date as your main MDR license.
Q: Does this work with third-party firewalls?
A: No. This specific integration is for customers who use a Sophos XGS Firewall. If you need to integrate third-party firewalls (like Palo Alto, Fortinet, etc.), you would use the standard third-party integration packs.