This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Monitoring Sophos XG Firewall with Elastic Beats (Filebeat, Metricbeat & Packetbeat)

Hi,

Our company is a Sophos MSP in Brazil and our customers are Families where we want to provide security on the Internet for kids, teenagers and the Family.

I want to know if it's possible to integrate the Elastic Beats (Filebeat, Metricbeat & Packetbeat) on Sophos XG Firewall to collect and send information about logs, performance, and network to Elastic Stack.

Elastic Stack is our SIEM and we'll send all endpoint and mobile information to there with Elastic Beats.

Follow a video that I made to show theses agents working on Sophos XG 105 Firewall:

https://www.youtube.com/watch?v=kKAgy-R-68s

I'm nothing using iVIew or send the logs to a Log Server because each XG Firewall will be placed on Customer Home, and because that I can't have a Log Server for each Home.

Is possible to integrate these Elastic Beats on Sophos XG Firewall?

Best Regards,

Ricardo Calimanis

This thread was automatically locked due to age.

Parents

0 Keyur over 6 years ago

Hi kal1ss

There is no official support this but XG firewall use standard Syslog server port 514 to send logs if the Elastic Beats products are able to listen on port 514 then you can check and verify. For traps and SNMP details, you can configure SNMP in XG firewall and add MIB file to a specific application.

https://community.sophos.com/kb/en-us/123184

https://community.sophos.com/kb/en-us/125597

Furthermore, you can submit your request to https://ideas.sophos.com/
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Keyur over 6 years ago

Hi kal1ss

There is no official support this but XG firewall use standard Syslog server port 514 to send logs if the Elastic Beats products are able to listen on port 514 then you can check and verify. For traps and SNMP details, you can configure SNMP in XG firewall and add MIB file to a specific application.

https://community.sophos.com/kb/en-us/123184

https://community.sophos.com/kb/en-us/125597

Furthermore, you can submit your request to https://ideas.sophos.com/
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 kal1ss over 6 years ago in reply to Keyur

Hi Keyur,

Thanks for the information!

I can't have a Log Server because each XG Firewall will be in a customer home and we'll remotely manage these firewalls.

Following your recommendation, I just posted an idea on ideia.sophos.com:

https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/38306302-monitoring-sophos-xg-firewall-with-elastic-beats

Thank You!!!

Best Regards,

Ricardo Calimanis
Cancel
Vote Up 0 Vote Down

Cancel