Sophos XDR Cybersecurity Campus (virus scanner)

Sophos XDR (Extended Detection and Response) is used to protect end devices used for business purposes within the university. The software enables centralized management and offers comprehensive security functions against malware, ransomware and other threats.

Sophos XDR is mandatory for all work-related Windows devices. Its use is strongly recommended for work-related devices running other operating systems. The IT Service Center is responsible for deploying and centrally managing the Sophos XDR instance.

The IT Service Center provides and manages the central Sophos Central instance. The system administrator is responsible for installing the Sophos client on the respective devices.

To ensure alarm tracking, it is absolutely necessary that the end device be fully registered in the central asset database.

Sophos XDR provides a cloud-based security solution that enables endpoints to be centrally monitored and protected. Through integration with Sophos Central, administrators can manage security policies consistently and effectively detect and remediate threats.

• Threat Detection: Identifies and blocks malware, ransomware, and other security risks in real time.
• Manual Scans: Allows you to perform targeted security checks on individual devices.
• Event Notification: The IT Service Center notifies system administrators of security alerts and relevant security events so that appropriate measures can be taken as needed.

• Departmental infrastructure: A department integrates all its workstations into a Sophos Central instance to ensure uniform security policies and perform centralized updates.
• Central institution: The university library uses Sophos XDR to protect public computer workstations from potential threats and to increase IT security for users.

The central Sophos Central instance is provided and operated by the IT Service Center. The person responsible for the system installs the Sophos client on the respective endpoints. After installation, the device is integrated into the central instance.

Important: The provided clients may only be installed on work devices. Alerts are always reported to the central Sophos instance. Uninstallation is only possible with administrative privileges.

The central Sophos Central instance is provided and managed by the IT Service Center. No separate request or individual account is required to use the Sophos client.

The client is available to all users of work-related devices. The person responsible for the system installs the Sophos client on the respective device.

To ensure that security alerts can be assigned to and forwarded to the appropriate personnel, the device must be registered in the central Assets database at https://assets.uni-kassel.de.

No training courses are currently offered.

Sophos XDR is used in accordance with the applicable data protection regulations. The central administration enables data protection-compliant handling of security events and minimizes risks from decentralized installations.

The framework agreement for Sophos XDR applies to Hessian universities and is valid until 01.11.2028. Licensing is carried out exclusively via central instances; individual licensing to individual users is not provided for.