I would like to do a top level export of all endpoints across all customers from Sophos Central Landing Page. Is this possible. At the moment, the only option is to perform an export per client through their tenant, but i am trying to track endpoints that may have been installed using incorrect installer files.
You could also script this using our API: https://developer.sophos.com/
You would have to iterate across the estates, but the same script could do it and generate one file at the end.
Thank you for reaching out on the Sophos Community forum.
In terms of exporting all devices present under the Sophos Central Partner portal, it looks like this is not yet possible. If you would like to see this functionality added in, I'd recommend submitting a request at the following "Sophos Ideas" page.
What may work a bit more accurately is to run a PowerShell query on all of the machines within a domain. The file you'll want to query is as follows. This is possible when the query command is run as "Admin."- PS C:\> get-content 'C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\CustomerIdentifier.txt' > "fileNameHere"
If your organization employs many remote workers, this may be better handled with a scheduled task.
This file will contain the "Unique ID" of the Sophos Central Admin instance that the device in question is registered with. By getting a report of all devices within a given domain, you can easily spot discrepancies in the list to correct them.
If you were to export all devices registered in Sophos Central Admin/Partner, you would need to work based on the hostnames of the devices, which may work if you have a standardized naming convention.
Let me know if this helps.
Program Manager, Support Readiness | CISSP | Sophos Technical SupportSupport Videos | Product Documentation | @SophosSupport | Sign up for SMS AlertsIf a post solves your question use the 'Verify Answer' link.