Prerequisites
To complete this integration, you'll need access to your Sophos Central account (https://central.sophos.com/manage/login) with Super Admin permissions to create a Client ID and Client Secret.
Deleting your integration from Defense.com
Log in to my.defense.com
Open your Integrations Centre dashboard.
Click the View Sophos Integration button.
This will load the Sophos Integration Details page.
Click the Delete Integration button.
Click OK to confirm you want to delete the integration.
Getting the required Credentials
Log in to your Sophos Central Admin account at https://central.sophos.com/manage/login
Go to My Products.
Click General Settings.
Click API Credentials Management.
Click Add Credential and give the credential the name Defense.com Sophos.
Under Role, select Service Principal Super Admin or Service Principal Management from the list and click Add. This generates the credential, together with a Client ID and a Client Secret. Make a note of the values for Client ID and Client Secret, these are required during the integration steps below.
These credentials will expire 36 months (3 years) after they are created. We will send you reminders when they are about to expire.
Completing the integration
Log in to my.defense.com
Open your Integrations Centre dashboard.
Click the Enable Sophos button.
This will launch the Sophos integration wizard.
Click Next.
You will need to enter the following new credentials to continue:
Client ID
Client Secret
Client Expiry
Click Check Credentials to verify the details entered are valid.
If the credentials are valid, we'll check the following permissions:
Alerts
Scan
Isolate
Click Next to proceed.
Click Complete.
That's it! Your Sophos integration is now complete. 🎉