Release Notes & News

Jun-09, 2021: XDR Query

2021-06-11T04:04:00Z

We are excited to announce that the Sophos XDR Query API is now generally available. This API allows you to query the new Sophos Data Lake. This gives you the ability to take your thread hunting to a new level correlating data across not only ...(read more)

Feb-17, 2021: Endpoint Isolation APIs

2021-02-20T04:02:00Z

Sophos is taking the next step forward toward putting the capabilities of auto-response in the hands of our partners and customers. With the latest Sophos Central API release you will now have the ability to programmatically isolate infected ma...(read more)

Dec-14, 2020: Live Discover API now generally available

2020-12-15T02:59:00Z

We are pleased to announce that the Live Discover API is now available. You can now run EDR queries against online endpoints and see the query results being returned in real-time. Instead of the usual lengthy introduction here, we'd like to poin...(read more)

Oct-12, 2020: Endpoint Global Settings updated

2020-10-12T22:41:00Z

Following our second drop last month of Global Settings management using the Endpoint v1 API, we have just added support for managing Intrusion Prevention (IPS) exclusions. Please see our Developer Portal post for some examples of management, a...(read more)

Sep-22, 2020: Endpoint Global Settings Part Deux

2020-09-23T04:16:00Z

Three months ago we released our first set of APIs to manage endpoint-related global settings, specifically, allowed/blocked items, web control settings, and global tamper-protection. We now have a second set of routes available in the Endpoint ...(read more)

Jun-15, 2020: New API routes

2020-06-18T16:25:00Z

We have just updated two APIs with new API routes:

See our Developer portal for full details and usage examples
Common v1: You can now manage users and groups for a tenant.
Endpoint v1: You can manage global endpoint settings such as allowed/blocked items, and Web Control local sites.

Common v1 changes

Add a new user to a tenant's directory
- POST /common/v1/directory/users
Find all groups or filter by specific fields such as 'name'
- GET /common/v1/directory/user-groups?fields=name&pageTotal=true
Add the new user to the first two of the groups above:
- POST /common/v1/directory/users/66b19b82-2fcb-40as-b15b-d691e49e25z1/groups
Additionally it is possible to specify the groups a user is added to when you create the user. The new API functionality is the same as the options in People in Sophos Central Admin.

Endpoint v1 changes

The new routes in the Endpoint v1 API are all under /endpoint/v1/settings and closely match the functionality in Sophos Central Admin:

API route	Page under "Global Settings"
`/endpoint/v1/settings/allowed-items`	"Allowed Applications"
`/endpoint/v1/settings/blocked-items`	"Blocked Items"
`/endpoint/v1/settings/web-control`	"Website Management"
`/endpoint/v1/settings/tamper-protection`	"Tamper Protection"

Getting Started with Sophos Central API!

2020-04-10T00:42:00Z

Hi Community!

Welcome to the new Sophos Central API Community Group designed as a place for developers to find and post resources about the Central APIs.

Please take a moment to read through our Recommended Reads and Help & Feedback posts.