Hello there,
I'd like to know how I can enable backup in Sophos Central so that we can back up our policies, events (generated by our endpoints), and anything else that has been saved within Sophos.
Any help much appreciated.
Kind regards,
Damian
Thank you for reaching out to the community forum.
This option is not available on Sophos Central yet, especially for endpoints, though performing backup, up, and restore for the firewall is available on Sophos Central.
https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/FirewallManagement/FirewallBackup/index.html
If you wish to collect this data for the endpoint, I suggest using our Sophos Central API and integrating it with your SIEM to accomplish above requirements.
You may want to look into setting up a SIEM solution. It is possible to send event data from Sophos Central to your SIEM solution for long term backup and storage instead.
- Sophos Central APIs: Send alert and event data to your SIEM
By default, Sophos will retain logs and events for up to 90 days to remain in compliance with GDPR.
