Mobile XDR is here!

We are delighted to announce that Sophos Mobile XDR is now available.

Mobile devices pose a growing threat to organizations and require no less protection than any other endpoint. With Mobile XDR admins can quickly identify devices running vulnerable app and operating system versions or those which are rooted or jailbroken. Mobile XDR also assists with IT hygiene, enabling admins to pinpoint devices low on disk space or no longer communicating with the server.

Information is stored side-by-side with each of our XDR enabled products – endpoint, server, firewall, email and cloud security – meaning customers can surface suspicious activity and investigate it across the entire estate.

How do I get started?

Customers need a Central Mobile Advanced or Intercept X for Mobile license, plus an Intercept X license which includes Sophos XDR.

A new Global Setting has been added (Mobile> Data Lake Uploads). Turn this on to start uploading Android, iOS and Chrome OS data to the Sophos XDR data lake. Twenty pre-configured queries are available and the data schema is a good reference for tweaking or creating your own queries.

Mobile XDR has begun rolling and is planned to reach all eligible customers by mid-February.