Get Reports with API or SNMP

I don't get your question, sorry.

You can use third-party tools to fetch some Firewall performance-data via SNMP or API. If those third-party tools provide capability of merging those data to graphs and putting those graphs to PDF, this is probably what you want. This all has to be done manually. You may search for tools like Nagios, Zabbix, Paessler PRTG etc...

To add to what HuberChristian mentioned, here are some related links for you to reference:

Sophos XG Firewall: How to configure SNMP - XG MIB

Sophos Community Thread

Regards.

Hi,

I Already use Zabbix to monitor Sophos XG, but in snmp, i don't get some informations.

My intention is get informations like this image, Security informations, Applications Blocked, Websites blocked, etc...

I think using SNMP it's not possible, maybe using API i can get more informations about the Firewall.

I would like this too, because the only scheduled reports I can get from the GUI are PDF. (Read: scheduled).

The PDF's are way too cumbersome to look through each day. I'd much rather have a quick view of charts or HTML within the body of the email.

I looked at the API Helper which you can find on some posts. The 2016 version. It shows you an interface similar to the SF OS but when you click on things, it shows you the API commands you can use for that area. Unfortunately, Reprts is NOT one of the areas shown at least in the 2016 version of API Helper. Maybe there is a newer one somewhere

Hi,

Im still working on it.

If I'm not mistaken, XG uses the internal logs to generate reports. My assumption is that opening "real-time" API access to reports has the potential to clog XG down with analytics aggregations when it should be doing other firewall related things. If anyone can confirm or deny this, I would appreciate it.

Anyway, it would seem the best (subjective) way to get external reporting/analytics from XG would be to pump the logs to a downstream aggregation server and report from there.

My 2 cents though.

There's one that I tried here called Fastvue. They sell a personal use license for 50$ when you email them. Try the trial version to see if this meets your needs. 

 https://www.fastvue.co

You can create such reports on a Thirdparty tool, when sending syslog to a thirdparty tool. Of course the Thirdparty Tools needs to support Reporting like this.

I'll suggest you to take an eye on Greylog (Opensource, Free) and Splunk.

Let's not forget that Sophos also has a free 100GB-capped version of iView which, one would presume, supports XG.

HuberChristian said:

... I'll suggest you to take an eye on Greylog (Opensource, Free) ...

Have you used Graylog? Their does not seem to be an extractor for XG and I'm wondering if you perhaps created one you would like to share?