Sophos XDR Cybersecurity Campus (virus scanner)

Sophos XDR (Extended Detection and Response) is used to protect end devices used for business purposes within the university. The software enables centralized management and offers comprehensive security functions against malware, ransomware and other threats.

Sophos XDR is mandatory for all work-related Windows clients. Its use is strongly recommended for work-related devices running other operating systems. The IT Service Center is responsible for deploying and centrally managing the Sophos XDR instance.

The IT Service Center provides and manages the central Sophos Central instance. The system administrator is responsible for installing the Sophos client on the respective devices.

To ensure proper alarm tracking, it is absolutely necessary that the end device be fully registered by the operator in the central asset database.

Sophos XDR offers a cloud-based security solution that enables centralized monitoring and protection of endpoints. Through integration with Sophos Central, security policies can be managed consistently, and threats can be effectively detected and remediated.

• Threat Detection: Identifies and blocks malware, ransomware, and other security risks in real time.
• Manual Scans: Allows you to perform targeted security checks on individual devices.
• Event Notification: The IT Service Center notifies system administrators of security alerts and relevant security events so that appropriate measures can be taken as needed.

• Protection of Work Computers: Sophos XDR continuously monitors work Windowsclients for malware and suspicious activity. Detected threats can be automatically blocked to protect the device and the data stored on it.
• Detection and Response to Security Incidents: Sophos XDR detects suspicious activity on a work device and reports it to the central Sophos Central instance. If necessary, the IT Service Center notifies the system administrator so that further protective measures can be taken.

The central Sophos Central instance is provided and operated by the IT Service Center. The person responsible for the system installs the Sophos client on the respective endpoints. Once the client is installed, the device is automatically integrated into the central instance.

Important: The provided clients may only be installed on work devices. Alerts are always reported to the central Sophos instance. Uninstallation is only possible with administrative privileges.

The central Sophos Central instance is provided and managed by the IT Service Center. No separate request or individual account is required to use the Sophos client.

The client is available for all users of work-related devices to download . The person responsible for the system installs the Sophos client on the respective device.

To ensure that security alerts can be assigned to and forwarded to the appropriate personnel, the device must be registered in the central asset database.

No training courses are currently offered.

Sophos XDR is used in accordance with the applicable data protection regulations. The central administration enables data protection-compliant handling of security events and minimizes risks from decentralized installations.

The framework agreement for Sophos XDR applies to Hessian universities and is valid until 01.11.2028. Licensing is carried out exclusively via central instances; individual licensing to individual users is not provided for.