Introduction

While our client-specific Onboarding Wizard is very helpful in setting a client's initial baseline configurations, this workflow can be cumbersome for partners who are continuously adding new clients to their client base.

As you become familiar with all of Field Effect MDR's features, and your preferred configurations, you may come to develop your own set of "baseline configurations" that is set for every new client you onboard. If this is the case for your organization, you can email support@fieldeffect.com to make a request that changes the default configuration for new client organizations you will onboard. 

When making your request, you can adjust the following parameters:

• Contact Information: Administrative, Shipping, Technical (primary and secondary)
• Agent Preferences:
  • Agent Protection
  • Host Notifications:
    • Custom notification message
• Endpoint Devices view: enabled or disabled
• AROs:
  • Show/hide sensitive information in notifications
• Active Response: 
  • Select response policy
  • Custom active response instructions/inclusions
•  Escalation contacts: set and prioritize

Making the Default Settings Request

Copy the text below into your favorite text editor and work through each of the entries, providing your preferred configuration. Once you have filled this out, include it with your email request.

For those unfamiliar with the unusual formatting, this is in a file format called JSON that will assist us in quickly processing your request.

{
    // This section lets you set the default contacts for your organization
    // Please set a value for each item below
    "contacts": [
        {
            "type": "Administrative",
            "email": "",
            "phone_number": "+",
            "first_name": "",
            "last_name": ""
        },
        {
            "type": "Shipping",
            "email": "",
            "phone_number": "+",
            "first_name": "",
            "last_name": ""
        },
        {
            "type": "Technical - Primary",
            "email": "",
            "phone_number": "+",
            "first_name": "",
            "last_name": ""
        },
        {
            "type": "Technical - Secondary",
            "email": "",
            "phone_number": "+",
            "first_name": "",
            "last_name": ""
        }
    ],


    "endpoint_agent_preferences": {
        // Set to 'true' to enable agent protection, remove if you don't want agent protection
        "prevent_agent_termination": true,


        // Set to 'true' to enable desktop notifications when Field Effect MDR takes an action 
        //on a host, remove it otherwise
        "workstation_notifications": true,


        // Set the following to "None" to not have a message, "Custom" to set a custom message
        "additional_notification_message_type": "Default",


        // Set this to your custom message by replacing the string below
        "custom_additional_notification_message": "An administrator may contact you to investigate the incident.",
    },


    // Set this to 'true' to enable the devices view in the MDR Portal
    "store_endpoint_device_data": true,
    
    // Set this to 'true' to allow sensitive data in notification emails.
    // We recommend you leave this as 'false'
    "email_aro_details": false,
    
    // Set the following to receive supplemental insights and data in AROs
    "include_aro_supplemental_data": true,
    "include_aro_supplemental_insights": true,
    
    // This section lets you set the Active Response profile
    "active_response_profile": {
        // Set this to 'Off' or 'Limited' or 'Balanced' or 'Aggressive'
        "response_policy": "Balanced",
        
        // Include custom instructions to use to override global Active Response settings
        "options": ""
    },
    
    // Set the following in the order of your contacts the SOC should to reach out
    // to in case of an incident. 
    // You can add up to 9 entries by copying the first entry and pasting it before the last 
    // entry in the list
    "escalation_contacts": [
        {
            "email": "",
            "first_name": "",
            "job_title": "",
            "last_name": "",
            "notes": "",
            "phone_number": "+",
            "secondary_phone": "",
            "user_id": ""
        },
        {
            "email": "",
            "first_name": "",
            "job_title": "",
            "last_name": "",
            "notes": "",
            "phone_number": "+",
            "secondary_phone": "",
            "user_id": ""
        }
    ]
}