Sophos Central

Product	Samurai [Local] Collector	Samurai [Cloud] Collector
Sophos Central

Sophos Central telemetry is collected via REST API.

Supported Products

Sophos Central can integrate with many Sophos and Third-Party products. The following products are supported through the Sophos Central integration:

• Sophos Intercept X

To complete this Integration you will need to:

1) Within Sophos Central Admin

• Create an API Token

2) From the Samurai  application:

• Complete the Sophos Central Integration

Create an API Token

Follow steps outlined within the Sophos documentation:

• API Token Management - Sophos Central Admin

Be sure to save a copy of the following information as it required to complete the integration:

• Client ID 
• Client Secret (as noted in the documentation you will not be able to view it again!)

Complete the Sophos Central Integration

You will need:

• Client ID: (from Create an API Token)
• Client Secret:  (from Create an API Token)

1. Login to your Samurai XDR tenant
2. Select Telemetry > Integrations
3. Select Create
4. Locate and click Sophos Central
5. Click Next (we leverage a Samurai Cloud Collector)
6. Enter a Name of Integration
7. Enter a Description (Optional)
8. Enter your Devicename
9. Enter your Client ID
10. Enter your Client Secret
11. Enter your Tenant ID (optional) - if not included we will identify from your credentials
12. Click Finish

For general information on Integrations refer to the Integrations article.