Sophos Firewall: NDR Active threat intelligence

Jun 1, 2026

A step-by-step tutorial showing how to configure and use NDR Active Threat Intelligence in Sophos Firewall, simulate detections, and investigate high-risk activity in Sophos Central.

  • Captions are generated by machine translation may contain errors**
  • Video Chapters*

00:00 Intro

00:18 NDR Active threat intelligence

01:04 NDR threat examples

02:05 Overview

02:15 Key caveats

02:53 Configure NDR Active threat intelligence

03:52 Test NDR detection

05:12 Test NDR case creation

05:39 Outro

  • Relevant Documentation*

🔗 About NDR Active threat intelligence
https://docs.sophos.com/nsg/sophos-firewall/22.0/Help/en-us/webhelp/onlinehelp/index.html

🔗 Configure NDR Active threat intelligence
https://docs.sophos.com/nsg/sophos-firewall/22.0/Help/en-us/webhelp/onlinehelp/index.html

💡 Ask questions and get expert answers in the Sophos Community. https://community.sophos.com

🔔 Follow and subscribe. https://www.youtube.com/@SophosCybersecurity