Dear there. Im trying to connect sophos firewall with elastic but i don't receive any logs. Im deployed an agent with sophos integration, and i followed the instructions on the elastic, i add my firewall ip instead localhost ( udp).what i should to do ?

Integration sophos Firewall with elastic

leandrojmp (Leandro Pereira) April 6, 2023, 12:33pm 4

If you configured the Elastic Agent to list on port 9549 you need to configure your Sophos firewall to send logs to the IP of the Elastic Agent on this port.

Topic		Replies	Views
Collecting Sophos XG logs using the Sophos integration feature Elasticsearch elastic-stack-monitoring	6	1276	August 28, 2023
Is it possible for Elasticsearch to integration with sophos and watchguard firewall? Elasticsearch	1	447	October 28, 2022
Sophos integration with elastic agent v 8.9.1 Elastic Security	2	549	October 23, 2023
Filebeat for Sophos XG Firewall SIEM	9	2983	September 4, 2019
Send sophos logs via filebeat to elasticsearch ( ubuntu 20.04 ) SIEM	2	415	April 11, 2022

Integration sophos Firewall with elastic

Related topics