Sophos Community
Sophos Community
  • User
  • Site
  • Search
  • User
  • Community & Product Forums
  • Community Blogs
  • Partners
  • Support Portal
  • Get started
  • Blogs
    • Sophos Community Blog
    • Sophos Endpoint
    • Sophos Firewall
    • Zero Trust Network Access
    • Sophos Switch
    • UTM Firewall
    • Sophos Wireless
    • Sophos Central
    • Sophos Cloud Optix
    • Sophos Central API
    • Sophos Factory
    • Sophos Email
  •  
    • Phish Threat
    • Sophos XDR
    • Sophos Mobile
    • On-Premise Endpoint
    • Encryption
    • Sophos Partners
    • Support Portal Feedback
    • Product Documentation Blog
    • SophosLabs
    • Free Tools
    • Sophos Integrations
  • Products
    • Endpoint Security
      • Endpoint protection - next-gen antivirus
      • Endpoint detection and response (XDR)
      • Mobile security
    • Email Security
      • Sophos Email
      • Phish Threat
    • Network Security
      • Sophos Firewall
      • UTM firewall
      • Zero trust network access (ZTNA)
      • Network detection and response (NDR)
      • Sophos Switch
      • Sophos Wireless
    • Cloud Security
      • Sophos Central
      • Sophos Cloud Optix
    • Sophos Home Premium
      • Sophos Home portal
    • Support Tools
      • Sophos integrations
      • Free tools
  • Services
    • Management platform
      • Sophos Central - sign in
      • Support portal - sign in
      • Community - sign in
  • Sophos Partners
    • Partners Corner
    • Partner blogs
    • Webinars and Events
  • Member Recognition
    • Community Leaderboards
    • Sophos Central login
    • Partner care
  • Become a partner
    • Join our program
  • Sophos Community: Getting started
    • How to get started
    • Frequently Asked Questions (FAQs)
    • SophosID Registration
    • How to contribute and participate
    • How to set up your profile
  •  
    • How to manage friends
    • How to manage private messages
    • How to manage digests, subscriptions, and notifications
    • Terms and Conditions of Use
  • Products and Services
    • Products
      • Endpoint Security
        • Endpoint protection - next-gen antivirus
        • Endpoint detection and response (XDR)
        • Mobile security
      • Email Security
        • Sophos Email
        • Phish Threat
      • Network Security
        • Sophos Firewall
        • UTM firewall
        • Zero trust network access (ZTNA)
        • Network detection and response (NDR)
        • Sophos Switch
        • Sophos Wireless
      • Cloud Security
        • Sophos Central
        • Sophos Cloud Optix
      • Sophos Home Premium
        • Sophos Home portal
      • Support Tools
        • Sophos integrations
        • Free tools
    • Services
      • Management platform
        • Sophos Central - sign in
        • Support portal - sign in
        • Community - sign in
  • Community Blogs
    • Blogs List 1
      • Sophos Community Blog
      • Sophos Endpoint
      • Sophos Firewall
      • Zero Trust Network Access
      • Sophos Switch
      • UTM Firewall
      • Sophos Wireless
      • Sophos Central
      • Sophos Cloud Optix
      • Sophos Central API
      • Sophos Factory
      • Sophos Email
    • Blogs List 2
      • Phish Threat
      • Sophos XDR
      • Sophos Mobile
      • On-Premise Endpoint
      • Encryption
      • Sophos Partners
      • Support Portal Feedback
      • Product Documentation Blog
      • SophosLabs
      • Free Tools
      • Sophos Integrations
  • Partners
    • Sophos Partners
      • Partners Corner
      • Partner blogs
      • Webinars and Events
    • Member Recognition
      • Community Leaderboards
      • Sophos Central login
      • Partner care
    • Become a partner
      • Join our program
  • Support Portal
  • Get started
    • Sophos Community: Getting started
      • How to get started
      • Frequently Asked Questions (FAQs)
      • SophosID Registration
      • How to contribute and participate
      • How to set up your profile
      • How to manage friends
      • How to manage private messages
      • How to manage digests, subscriptions, and notifications
      • Terms and Conditions of Use
Sophos Integrations
Sophos Integrations
Integrations ConnectWise Automate.
  • Release Notes & News
  • Integrations
  • Discussions
  • Early Access Programs
  • Sophos MSP Program
  • More
  • Cancel
  • New
Sophos Integrations requires membership for participation - click to join
  • -Third Party Integrations
    • -ConnectWise Automate.
      • Assigning Effective Permissions to Sophos Plugin User Classes
      • Duplicate Machine Entries
      • +ConnectWise Automate Script Integration [Legacy]
      • Upgrading the Sophos Automate plugin
    • +Datto RMM
    • +Kaseya VSA Plug-in
    • N-Able N-Central
    • +NinjaRMM
    • +Splunk apps for Sophos
    • SyncroMSP
  • Central Partner - Customer CSV
  • MSP API Tools

You are currently reviewing an older revision of this page.

  • History View current version

ConnectWise Automate Native Integration

Introducing the Generally Available release for our latest integration; Sophos plugin for ConnectWise Automate.  This plugin is designed to allow our MSPs to now manage Sophos Central endpoints and alerts directly from within the ConnectWise Automate management portal.

*Note: By clicking download, you agree to the Sophos API & Plugins Terms of Use. You also acknowledge that Sophos processes personal data in accordance with the Sophos Privacy Policy.

Plugin Overview

Dashboard view - Quickly determine service and health issues with endpoints.

Tenant View - Automatically retrieve a list of all tenants. Filter by Tenant.

Endpoint View & Management - Drill into endpoints to determine issues and action a single endpoint, or many endpoints in bulk.

Actions include:

  • Forcing definitions updates
  • Enabling/Disabling tamper protection
    • Tamper protection if disabled, will be automatically enabled after a period of time
  • Deleting endpoints from Sophos Central
    • Deletion of the endpoint does not uninstall the endpoint

Alerts View & Management - Filter alerts by category and severity, then action the alert, or multiple alerts all at once.

Actions include:

  • Acknowledging the alert
    • This will remove the alert from Sophos Central
  • Cleaning a virus or threat from the affected endpoint(s)
  • Cleaning a potentially unwanted application from the affected endpoint(s)
  • Authorizing a file previously marked as potentially unwanted to run on selected endpoint(s)

Deployments - Upload CSV files, manually deploy to specific endpoints on the fly, or configure Autodeploy settings across Client Locations. 

Audit Logs - Audit Logging to determine and self troubleshoot issues such as; If installs and bulk actions were successful, or failed

Installation & Setup

Start by opening the Plugin Manager.  This is found by clicking on System, expanding Solutions, and then clicking on Plugin Manager

 

From the Plugin Manager, Click on Advanced at the top right, then Manage Plugins and Add Plugin.

 

Browse to the location where you download the Plugin DLL and then select it and click Open.

 

Simply Click Save and Close on the Add a Plugin screen.

 

You will now see Sophos Central in the Plugin Manager. However, it will be Disabled by Default. Right Click on Sophos Central and Click Enable

 

Enabling the Plug-in will require a restart of the Database Agent. Click Yes.

 

Once Restarted Successfully, you will need to close and re-open the Automate Client.

 
 
 

Configuring the Sophos Central Plugin

Access the Sophos Central Plugin from Tools, then click on Sophos Central

 

You will start on the Settings page. The first step will be to enter your Sophos Central Partner API Credentials.

***This is not your Sophos Central Partner Dashboard login E-mail and Password***

 

From a browser, log in to your Sophos Central Partner Dashboard. Go to Settings & Policies and then click on API Credentials.

 

Click on the Add Credential button on the top right.

 

Enter the name and description for your API Credential.

 

You now have an API Credential created. Copy the Client ID and then click on Show Client Secret.

***The Show Client Secret is only available to be view once for security reasons***

 

Now go back to the Sophos Central Plugin and enter your Client ID and Client Secret.

 
 
 

Assigning Client to Sophos Central Customers

Next, you will need to match your Automate Client to your Sophos Central Customers.

 

Select an Automate Client and then click on the Assign Tenant button and from the dropdown select the Sophos Central Customer that matches.

You will also need to grab the Customer Token from the CSV file found on the Sophos Central Partner Dashboard - Deployment tab.

***Auto Deploy will not work without the Customer Token***

***Double Check the customer token as if it is wrong it will install into the incorrect Customer***

 

You now have an Automate Client matched to a Sophos Central Customer.

 
 
 

Deployment Configuration

Central Endpoint Protection = Endpoint Protection

Intercept X Advanced = Endpoint Protection & Intercept X

Intercept X Advanced with MTR = Endpoint Protection & Intercept X & MTR

Intercept X Only = Intercept X

***License Selection for the customer is still done at the Sophos Central Partner Dashboard level***

Troubleshooting & Logging

The Sophos plugin will keep an audit log of actions attempted and performed on Endpoints, Alerts, and Deployments
• To check Audit logs navigate to Sophos Security Solutions --> Logs --> Audit Logs

Also detailed application logs are kept

Help & Support

Unfiltered HTML
  • Getting started
  • Legal
  • Privacy
  • Cookies

© 1997 - 2024 Sophos Ltd. All rights reserved.