Integrating Sophos with SecurityCoach
In this article, you will learn how to integrate Sophos' Endpoint Security with SecurityCoach. Once you set up this integration, data provided by Sophos will be available under the SecurityCoach tab of your KMSAT console. This data can be viewed in SecurityCoach reports and used to create detection rules for real-time coaching campaigns. For general information about SecurityCoach, see our SecurityCoach Product Manual.
Click the links below to learn how to integrate Sophos with SecurityCoach.
Jump to:
Create Your Sophos API Token
Set Up the Integration in Your KMSAT Console
Create Your Sophos API Token
Before you can set up this integration in your KMSAT console, you will need to create a Sophos API token in your Sophos console.
To create your API token, follow the steps below:
- Log in to your Sophos console as a super admin.
- Navigate to Global Settings > API Token Management.
- Click Add token at the top-right corner of the page.
- Select a token name and click Save.
After you click Save, you will be able to view the API Access URL + Headers and the Token Expiry Date in the API Token Summary section of the page.
Set Up the Integration in Your KMSAT Console
Once you have created your Sophos API key, you can set up the integration in your KMSAT console. To set up the integration in your KMSAT console, follow the steps below:
- Log in to your KMSAT console and navigate to SecurityCoach > Setup > Security Vendor Integrations.
- Locate the Sophos card and click Configure.
- In the API Access URL + Headers and the Token Expiry Date fields, enter the information that displays in the API Token Summary section of your Sophos console. For more information, see the Create Your Sophos API Token section above.
- Click Authorize.
Once you’ve successfully authorized this integration, you can manage detection rules for Sophos on the Detection Rules subtab of SecurityCoach. For a full list of available system detection rules for this vendor, see our Which Detection Rules Can I Use with My Vendors? article.
Comments
0 comments
Article is closed for comments.