Introduction

After completing your first steps with MDR and completing the onboarding wizard, you can start configuring the service to align with your organization's environment, users, and cybersecurity requirements.

This article provides an overview of some more advanced configuration tasks available to administrators. Completing these help ensure that Field Effect MDR can effectively monitor your environment, provide meaningful insights, and support your organization's cybersecurity objectives.

This article covers the following topics:

• Before You Begin
• Configuration Areas
  • DNS Firewall
  • SEAS
  • Single Sign On
  • Antivirus Management
  • Syslog forwarding

Before You Begin

Ensure that:

• You have administrator access to Field Effect MDR.
• Your organization has completed the onboarding process.
• The necessary endpoints, network sensors, or collectors have been deployed, if applicable.
• You have access to relevant information about your users, systems, and network environment.

Video Overview

Additional Features

DNS Firewall

Our DNS Firewall provides DNS protection to devices connected to your internal networks (on-network protection), or when connected to external networks (roaming).

SEAS

SEAS is a service that allows users to submit any email they find suspicious for analysis. Once enabled, any user can send a suspicious email to SEAS.

Single Sign On

If your organization uses Single-Sign-On (SSO) to log into MDR accounts, you can enforce some of our systems (The MDR Portal, Vision, and the mobile app) to only allow SSO logins.

Antivirus Management

Antivirus Management, powered by our endpoint agent, allows endpoint devices to report back to the network sensor about the status and configuration of the device's Antivirus. 

Syslog Forwarding

Syslog is a standard format for the reporting of system events, and are supported by most operating systems, including appliance devices. Once collected, syslog messages can be used to investigate incidents.