Zero Trust Network Access

Discussions Sophos Central API - ZTNA

Zero Trust Network Access requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 4 replies
Answers 2 answers
Subscribers 17 subscribers
Views 7299 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Central API - ZTNA

m33rk4t over 1 year ago

Hi all,

I'm asking if there is a way to interact with ZTNA events through Sophos Central API?

I've done some research on developer.sophos.com/apis, but ZTNA does not seem to be referenced yet.

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 1 year ago in reply to m33rk4t +2 suggested

You could do XDR Queries, which include data from ZTNA. https://news.sophos.com/en-us/2021/09/20/ioc-hunting-expanding-reach-with-sophos-central-xdr-api/ You could check the SIEM Integration of Central…

Parents

0 Tejas Kashyap over 1 year ago

Hi Philippe, Currently, we do not expose ZTNA APIs publicly. This is on our roadmap. Can you provide a bit more info on your use case and what you are trying to do?
Cancel
Vote Up +1 Vote Down

Cancel
0 m33rk4t over 1 year ago in reply to Tejas Kashyap

Hi Tejas,

I was hoping to grab events from "Denied resource access" and "Authenticated Users" to inject it in our SIEM.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 1 year ago in reply to m33rk4t

You could do XDR Queries, which include data from ZTNA.

https://news.sophos.com/en-us/2021/09/20/ioc-hunting-expanding-reach-with-sophos-central-xdr-api/

You could check the SIEM Integration of Central itself: https://support.sophos.com/support/s/article/KB-000036372?language=en_US

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel

Reply

0 LuCar Toni over 1 year ago in reply to m33rk4t

You could do XDR Queries, which include data from ZTNA.

https://news.sophos.com/en-us/2021/09/20/ioc-hunting-expanding-reach-with-sophos-central-xdr-api/

You could check the SIEM Integration of Central itself: https://support.sophos.com/support/s/article/KB-000036372?language=en_US

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel

Children

0 m33rk4t over 1 year ago in reply to LuCar Toni

Hi LuCar,

Okay thanks =), i will check that !
Cancel
Vote Up 0 Vote Down

Cancel