XDR and EDR Data Lake Early Access Programs Update

Products•Early Access Program•Sophos EDR•Sophos XDR

Since the beginning of June new customers have no longer been able to join the Early Access Programs (EAPs) and previously enrolled customers haven’t been able to enroll new devices in the EAP.

Jun 17 2021 By

From June 21 the following additional changes will be implemented:

  • Customers with EDR/MTR – enrolled devices will continue to upload to the Sophos Data Lake but they will no longer be able to query email or firewall data.
  • Customers with Intercept X Advanced/Intercept X Advanced for Server – Live Discover will be removed from enrolled devices. They will still see Live Discover in Sophos Central but won’t see endpoint/server queries and if they try to run Data Lake queries they will receive a ‘customer not licensed’ error.
  • The XDR and EDR Data Lake EAPs are still planned to close permanently on August 2, at which point enrolled devices will revert to their recommended software version.

Testing XDR and new EDR capabilities
Existing customers can start an in-product trial by clicking the ‘Free Trials’ link in the bottom of the Left-Hand navigation menu in Sophos Central:

  • Non EDR customers looking to try EDR can start an Intercept X Advanced with EDR Endpoint and/or Server trial
  • Customers licensed for EDR can try Sophos XDR capabilities by starting an XDR trial

New customers who start a Sophos Central trial will receive a license which gives 30-day access to the Sophos Data Lake and will be licensed to send all cross-product data into the Sophos Data Lake.

You can share this post on the community forums that covers the changes.

About the Author

Sophos is a global leader and innovator of advanced security solutions that defeat cyberattacks, including Managed Detection and Response (MDR) and incident response services and a broad portfolio of endpoint, network, email, and cloud security technologies. As one of the largest pure-play cybersecurity providers, Sophos defends more than 600,000 organizations and more than 100 million users worldwide from active adversaries, ransomware, phishing, malware, and more. Sophos’ services and products connect through the Sophos Central management console and are powered by Sophos X-Ops, the company’s cross-domain threat intelligence unit. Sophos X-Ops intelligence optimizes the entire Sophos Adaptive Cybersecurity Ecosystem, which includes a centralized data lake that leverages a rich set of open APIs available to customers, partners, developers, and other cybersecurity and information technology vendors. Sophos provides cybersecurity-as-a-service to organizations needing fully managed security solutions. Customers can also manage their cybersecurity directly with Sophos’ security operations platform or use a hybrid approach by supplementing their in-house teams with Sophos’ services, including threat hunting and remediation. Sophos sells through reseller partners and managed service providers (MSPs) worldwide. Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com.