Sophos Central

Applies To: Sophos Central

Overview

Sophos Central is a unified platform for security management and an element of Sophos' synchronized security strategy to enable multiple security products to work together seamlessly with simpler management and better security.

EventTracker is an enterprise-class platform that seamlessly combines SIEM, Log Management, File Integrity Monitoring, machine Analytics and so forth.

EventTracker Knowledge Pack for Sophos Central allows you to monitor the following components: -

Security – Threat and potentially unwanted application detection.
Operation – Web content filtering, endpoints and devices added or removed.

Previous Next

Once Sophos Central is configured to deliver events to EventTracker Manager; alerts, dashboards and reports can be configured into EventTracker.

Some of the Knowledge Packs available in EventTracker are listed below. For more information, please refer Integration Guide.

Operations

Reports

Sophos Central- Web content filtering- This report provides information related to all the web content filtering that is done by the Sophos Central.
Sophos Central- Endpoint added or removed- This report provides information related to all the endpoints that are added or removed from the Sophos Central.
Sophos Central- Devices added or removed- This report provides information related to all the devices added or removed from the Sophos Central.

Security

Alerts

Sophos Central: Threat detection: This alert is generated when a threat is detected by the Sophos Central.
Sophos Central: PUA detection: This alert is generated when any potentially unwanted application is detected by the Sophos Central.

Reports

Sophos Central- Threat detection- This report provides information related to all the threat that is detected by the Sophos Central.
Sophos Central- Potentially unwanted application detection- This provides information related to all the Potentially unwanted application that is detected by the Sophos Central.

Scope

The configuration details in this guide are consistent with EventTracker version 8.x and later, and Sophos Central.

Documentation

For more information, please refer to the Sophos Central Integration guide.