Guest User!
You are not Sophos Staff.
Hi,
I am trying to integrate my Sophos XG's with a free SIEM platform. Has anyone successfully managed to get through with this. I am currently trying with SPLUNK but i am having issues. I have also considered Alien Vault OSSIM, SNORT and WAZUH. Can anyone assist?
Hello Anil Lutchman,
Thank you for reaching out to the community, for the query please refer the following useful KBA:
> Add a syslog server: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SystemServices/LogSettings/SyslogServerAdd/index.html
> Cloud SIEM for Sophos XG Firewall: https://www.blumira.com/integration/sophos-xg-firewall/
> SIEM Integration in Sophos Central: https://www.youtube.com/watch?v=1MPwbfoIdBk
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Global Support & Services
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Hello Anil Lutchman,
Thank you for reaching out to the community, for the query please refer the following useful KBA:
> Add a syslog server: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SystemServices/LogSettings/SyslogServerAdd/index.html
> Cloud SIEM for Sophos XG Firewall: https://www.blumira.com/integration/sophos-xg-firewall/
> SIEM Integration in Sophos Central: https://www.youtube.com/watch?v=1MPwbfoIdBk
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Global Support & Services
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
