Integrating Sophos Central

Barracuda XDR can monitor your Sophos Central APIs using the Sophos Central API. To integrate the monitoring of your environment, please follow the below configuration procedure. For information on the API, see the reference guide at https://community.sophos.com/kb/en-us/125169. 

To integrate Sophos Central, perform the following procedures, below:

• To set up Sophos Central
• To set up Barracuda XDR Dashboard

To set up Sophos Central 

1. Log in to your Sophos Central Admin Portal. 
2. In Sophos Central Admin, navigate to Global Settings > API Token Management. 
3. To create a new token, click Add token in the top right corner of the screen. 
4. Name the token SKOUT SIEM.
5. Click Save.
   The API Token Summary for this token is displayed. 
6. Click Copy to copy your API Access URL, Headers, and API Access URL + Headers from the API Token Summary section onto your clipboard.
   
7. Provide these credentials to Barracuda XDR to collect your Sophos Central Data.

To set up Barracuda XDR Dashboard

1. In Barracuda XDR Dashboard, click Administration > Integrations
2. On the Sophos Central card, click Setup.
3. Select Enabled.
4. Enter the following information:
   • API Access URL
   • X-API-Key
   • Authorization Header
5. Click Save.