Sentinel's Strategy for MXDR

Introducing Managed Extended Detection
and Response (MXDR)

Introducing FortisX: Sentinel's Managed Extended Detection and Response (MXDR)

Sentinel’s FortisX safeguards your business, facilitates digital transformation, fosters innovation, and promotes growth.

FortisX is a security service that delivers best-in-class cyber protection: the top XDR platform from Cisco, broad third-party security solution integration from industry leaders, alignment with the MITRE ATT&CK framework, as well as 24x7x365 Security Operations Center (SOC) monitoring from Fortis by Sentinel.

More than a service, FortisX is a partnership based on four pillars: dependable technology, skilled and qualified people, proven methods, and utmost fidelity. FortisX enables your cybersecurity maturity to improve over time, as its highly customizable workshops and service lifecycle constantly assess your security environment, skills, and capabilities to resist and react to the latest cyber risks.

What are the SOC Analyst Services with Sentinel's FortisX?

Notification – Phone and/or email notification from one of Fortis by Sentinel’s SOC engineers to the customer contact(s) identified during onboarding.
Investigation – SOC analysts will investigate the alert within the platform and the customer environment within reason, where access to pertinent customer assets exists. This will be performed in conjunction with the customer’s security team. The ticket will remain open during the investigation period.
Remediation Guidance – SOC analysts will provide remediation guidance for triggered alerts. Guidance from Fortis experts for specific systems beyond this SOC analyst assistance is available at an additional charge.
Host Isolation Services – SOC analysts will perform host isolation, assuming the proper licensing and features of this service are configured in the customer’s endpoint detection technology. These are also provided via process integrations within Cisco XDR or Microsoft Defender XDR to automatically or manually isolate users and devices across a customer’s security environment using advanced investigation processes and response playbooks.
User Isolation – Depending on the customer environment, user isolation or dynamic policy enforcement such as capabilities available with Microsoft Entra Identity may be possible within the contract. Sentinel will work with the customer during onboarding to identify if the managed contract on your identity service includes anything beyond the natively included automated user isolation available from the products themselves.
Automated Playbooks - Where FortisX services include automated or manually triggered playbooks, Sentinel will review availability in each platform during onboarding and document any customer preferences related to the use and notification or approval process of each.