Sophos Central

Samurai [Local] Collector	Samurai [Cloud] Collector	Samurai [Cloud Native] Collector

Sophos Central telemetry is collected via REST API.

Supported Products

Sophos Central can integrate with many Sophos and Third-Party products. The following products are supported through the Sophos Central integration:

• Sophos Intercept X

To complete this Integration you will need to:

1) Within Sophos Central Admin

• Create an API Token

2) From the Samurai MDR portal:

• Complete the Sophos Central Integration

Create an API Token

Follow steps outlined within the Sophos documentation:

• API Token Management - Sophos Central Admin

Be sure to save a copy of the following information as it required to complete the integration:

• Client ID 
• Client Secret (as noted in the documentation you will not be able to view it again!)

Complete the Sophos Central Integration

You will need:

• Client ID: (from Create an API Token)
• Client Secret: (from Create an API Token)

1. Login to the Samurai MDR portal
2. Click Telemetry and select Integrations from the main menu
3. Select Create
4. Locate and click Sophos Central
5. Click Next (we leverage a Samurai Cloud Collector)
6. Enter a Name of Integration
7. Enter a Description (Optional)
8. Enter your Devicename
9. Enter your Client ID
10. Enter your Client Secret
11. Enter your Tenant ID (optional) - if not included we will identify from your credentials
12. Click Finish

For general information on Integrations refer to the Integrations article.

Our Integration guide was accurate at the time of writing but vendors change things frequently! If you find errors or anything is outdated, let us know by raising a request in the Samurai MDR application and we shall get it updated.