Sophos Firewall

Version : Sophos SG/UTM 9 or Sophos Firewall version 15.01.0 – 17.1.2.

Sophos Firewall is a network security device which helps organizations prevent threats and malicious activities.

Netsurion Open XDR helps to monitor events from Sophos Firewall. Its dashboard and reports will help you monitor traffic, threat detected by IPS, web application filter activities and VPN activities of your organisation. Its real time alerting capability helps your security teams to act on IPS alerts, anomalous activities, configuration changes, logon failures and generate reports for the same, for assessment.

Netsurion Open XDR built-in data source integration enables you to gather business intelligence providing increased security, performance, availability, and reliability of your systems.

Netsurion Data Source Integration for Sophos Firewall allows you to monitor the following components:-

• Security – Firewall spam, virus, IPS detection and advanced threat protection, suspicious email traffic.
• Operation – Firewall admin and sandbox activities, firewall allowed/denied traffic and system health, configuration changes, FTP activities, WAF traffic.
• Compliance – Firewall logon success and failure, VPN login/logout and logon failures.

Once Sophos XG Firewall is configured to deliver events to Netsurion Open XDR Manager; alerts, dashboards and reports can be configured into Netsurion Open XDR.

To take advantage of this data source integration and to learn more about alerts, reports, and dashboards, contact your Technical Account Manager (TAM). If you are not currently a Netsurion customer or partner, contact us to learn more.