Integrating Sophos Central

Barracuda XDR can monitor your Sophos Central APIs using the Sophos Central API. To integrate the monitoring of your environment, please follow the below configuration procedure. For information on the API, see the reference guide at https://community.sophos.com/kb/en-us/125169. 

To integrate Sophos Central, perform the following procedures, below:

• To set up Sophos Central

• To set up Barracuda XDR Dashboard

To set up Sophos Central 

1. Log in to your Sophos Central Admin Portal.

2. Go to Configure > Settings & Policies > API Credentials Management.

3. Click Add Credential and give the credential a name and description.

4. Select the Service Principal Read-Only role.

5. Click Add.
   This generates the credential, together with a Client ID and a Client Secret.

6. Copy the following:

   • Client ID

   • Client Secret.

     • You can only see the Client Secret once.

     • You won't receive an alert when an API credential expires. You must create a new API credential to avoid interruption due to an expired API credential. The new credential must be entered into the Barracuda XDR Dashboard.

To set up Barracuda XDR Dashboard

1. In Barracuda XDR Dashboard, click Administration > Integrations

2. On the Sophos Central card, click Setup.

   

3. Select Enabled.

4. Enter the following information:

   • Client Id

   • Client Secret

   • Tenant ID – If the API Credentials belong to a “Partner” in Sophos Central, select the Sophos tenant that corresponds to the Barracuda XDR account currently selected.

5. Click Save.