FortiSIEM Discussions
victorthai
New Contributor

Central Sophos For FortiSIEM

How do I integrate Sophos Central with my FortiSIEM? The manual says I need an API Key, but in Sophos, I only have a Client ID and Client Secret?

10 REPLIES 10
M1kemclain247
New Contributor

Good day i have updated to FortiSIEM 7.4.0.0435 which includes support for latest Sophos Central API- however it doesn't seem to be working. 

 

https://docs.fortinet.com/document/fortisiem/7.4.0/external-systems-configuration-guide/750644/sopho... 

 

i followed the documentation as per in the guide. but its not pulling events i can see a heartbeat log but its not puling any info from the dashboard.  Raw Message 

[PH_DEV_MON_CLOUD_SERVICE_HEARTBEAT]:[eventSeverity]=PHL_INFO,[fileName]=phBaseAgentManager.cpp,[lineNumber]=167,[phCustId]=2000,[reptVendor]=Sophos,[reptModel]=Central,[reptDevIpAddr]=3.73.86.161,[reptDevName]=api.central.sophos.com,[version]=ANY,[domain]=,[phLogDetail]=

 

img1.png

Picture1.png

 

 

 

M1kes
M1kes