Buenos Día comunidad,
Alguien sabe si desde Sophos Central para todos mis equipos Finales donde tengo Sophos Intercept X puedo configurar syslog a un servidor del cliente para recolectar toda la información.
La configuración ya la realicé desde Sophos Firewall, pero requiero saber si es posible con Endpoint de Sophos desde central.
Muchas gracias.
Hi NTM,
Thanks for reaching out to the Sophos Community Forum.
It is possible to send Alert and Event data from Sophos Central to your SIEM solution. Additional information on this can be found in the following article.
- Sophos Central APIs: Send alert and event data to your SIEM
Could you elaborate on what kind of information you are trying to gather from your endpoints?
Hi NTM,
Thanks for reaching out to the Sophos Community Forum.
It is possible to send Alert and Event data from Sophos Central to your SIEM solution. Additional information on this can be found in the following article.
- Sophos Central APIs: Send alert and event data to your SIEM
Could you elaborate on what kind of information you are trying to gather from your endpoints?
