Adding this documentation on how to generate encrypted passwords for use with the Sophos XG API. The published Sophos documentation is incorrect and lacks some verbosity. https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp…

Hi, We're writing some reports the GET function is working fine, but when we make POST to add new user to group we get error 400, can someone point me at right direction or tell me what i'm doing wrong, with same script just modified the body part…

Hi, We're developing some api request to daily reports that work fine with GET, but when we made some POST they didnt work, i can create user with the same script below, but when i try to put that user into a group i get error 400, if someone have…

Hi, I did follow the manual with cURL but i couldnt connect to sophos, i try with ps and worked but it didnt bring me any endpoint, could you point me in the right direction. Thanks

Hello, I am trying to set up kind of a "blue-green" deployment environment for our website. We already have a working web server and a firewall (WAF) rule pointing to this web server. I've added a second "web server" and I now see it in the list under…

Anyone else noticing a high number of request time outs to the API's in the past 24hrs or so? my requests currently go to api-us01.central.sophos.com/endpoint/v1/endpoints getting a a time out on about every other request sent. [These are not…

Hey all new to the community... Just started using the API's and have already hit a snag. has anyone else ran into a 10 character limit in the endpoint api? specifically: /endpoint/v1/endpoints?hostnameContains=<SOMESTRING> If I enter a device…

Hi community, I've spent a bit of time trying to come up with a slightly friendlier version of the SFOS API. You may find my work on my Github page. The idea is to write code in JSON rather than XML, and the SDK takes care of the conversion (most…

Dear, I would like to know if anyone has an improved version of the existing sophos Central Api in the Xsoar marketplace (demisto) in palo alto? or if they know a way for sophos to send by mail the result of a Scan and/or the alarms that are seen…

Hello, Just started trying to use this plugin. We are a sophos reseller and also use automate to manage a small handful of customers. The issue is that this plugin loads information on every device in ALL of our partner portal. Their are close to 100…

Hello, was wondering if it was possible to isolate individual devices via RESTful API calls and/or if there is already documentation around this. Thank you,

Hello, I am trying to raise a request to get Sophos to develop a feature, where the API can also give you the information "last active" from the API response. At the moment, the API only gives the information "last seen", which isn't as up to date as…

1) I'm using this API to add IPhost to a group, and it appears to be working fine. Request Body ip:port/.../APIController <Request> <Login> <Username>{username}</Username> <Password passwordform="plain">{password}</Password> </Login> <Set operation…

Hi! Is it possible to enable/disable a firewall rule without the need to write it all in the XML of the API request? I need to do this because I may edit the rule in the WEB UI, and I don't wont to edit every time the API request. Thanks, Andrea

I am trying to use the API to remove users but it doesn't seem to work. I get the result below but the user remains on the firewall still: <?xml version="1.0" encoding="UTF-8"?> -<Response IPS_CAT_VER="1" APIVersion="1800.2"> -<Login> <status>Authentication…

Hello everyone, I have started to test the APIs, but when I run the Who Am I, the Unique ID doesn't match the one in my console, every two characters they swap positions. I also use the method from the PC looking for Unique ID in C:\ProgramData\Sophos…

Does anyone know of an API XML that will log a new user into the user portal? In short I'm trying to automate setting up new AD users. Normally we just log the AD user into the user portal, and everything is done (the user is imported from AD with the…

Hi Community, i'm trying to create a new LoadBalancer via REST API. Everything works fine but i can't see the new and successful created object via WebAdmin UI. Endpoint: /api/objects/packetfilter/loadbalance/ POST Example { "_locked": ""…

Hello Community, Is there an easy way to add another IP address for API access on many firewalls? I have not found a way via Sophos Central, via the API itself, nor via a configuration export and import. Is it the only way to log in on each firewall…

Is it possible via the API to add a new IPHost object to the HostList of an existing IPHostGroup without overwriting the existing contents of the group? I am creating an IPHost object via API but also want to then place it in into an existing IPHostGroup…

Hi, Does Sophos provide any native WMI namespaces/classes to programmatically retrieve information about the Endpoint Agent installed directly on devices, both Windows Client OS and Windows Server OS? For example I am looking to gather the overall health…

I would like to do a top level export of all endpoints across all customers from Sophos Central Landing Page. Is this possible. At the moment, the only option is to perform an export per client through their tenant, but i am trying to track endpoints…

Hi, SFOS API is a pure garbage. Recently I had to add like 200 domains in the MTA blacklist section and guess what - NOTHING WORKED! Export and editing (adding) the domains and then importing the tar.gz-ed xml config do not work! Direct calls to the…

We currently use SOPHOS Intercept X Endpoint and Intercept X Server managed via the SOPHOS Central portal. Our development team has requested the ability to programmatically submit files for AV scan and receive results immediately to provide to an application…

I've searched everywhere, but have not found the answer to exactly how to structure the data array for the API for isolation of multiple systems. When I use the structure documented on the developer site, I can't get anything other than "error": "UnsupportedMediaType…