Advisory: Support Portal Maintenance. Login is currently unavailable, more info available here.
I would like to request that the MySophos portal have the option to be protected by 2FA.
With more and more attacks being brought to light, my company has been looking to secure as many accounts as possible with 2FA. We noticed that the MySophos portal, where devices can be listed and device ownership transfers be initiated, can be access without 2FA, and there appears to not be any option to enable 2FA for the site.
I'll venture to guess that this is done partly due to the Sophos XG setup process, in which we register the device to an account; it would require additional steps, and provide additional points of failure, during device setup.
John Banks - A project is being planned to update and improve our MySophos portal experience. No timeline is currently available, but please stay tuned for more information.
Thank you for taking the time to reach out, I have forwarded this over to our team for their feedback. I'll provide an update when I hear back.