Extended Detection & Response (XDR) Solution for Klinikum Esslingen

Extended Detection & Response (XDR) Solution: Replacement of the existing signature-based endpoint security with an XDR solution featuring behavioral analysis, machine learning, and forensic analysis capabilities. The service includes establishing full endpoint visibility and control for all IT endpoints (clients and servers) at Klinikum Esslingen, activating Sophos Synchronized Security for real-time communication between endpoint agents and the existing Sophos XGS Firewall for automated network isolation of compromised endpoints, creating forensic analysis capabilities through continuous endpoint telemetry recording, root-cause analysis, and threat hunting across all endpoints, and activating cross-domain correlation (XDR) by linking endpoint events with firewall, email, cloud, and identity data sources, along with preparing for MDR service integration. The solution must meet regulatory requirements from NIS-2 and GDPR regarding endpoint security and support vulnerability management through endpoint-based vulnerability visibility. Networked medical devices (IoMT) and building management systems (GLT) are not part of this tender.

Tender documents

Additional details