I would like to request that the MySophos portal have the option to be protected by 2FA.
With more and more attacks being brought to light, my company has been looking to secure as many accounts as possible with 2FA. We noticed that the MySophos portal, where devices can be listed and device ownership transfers be initiated, can be access without 2FA, and there appears to not be any option to enable 2FA for the site.
I'll venture to guess that this is done partly due to the Sophos XG setup process, in which we register the device to an account; it would require additional steps, and provide additional points of failure, during device setup.
This thread was automatically locked due to age.
