Best Practice for Sophos Endpoint Security Asset Load

The best practice for the Sophos Endpoint Security Asset Load provides you with the information that you need to complete  and run the integration successfully, and gain visibility of the data that is ingested by Oomnitza.

The following items are in the package:

• The integration
• The Business Objects
• The Credentials
• The Roles
• The Saved Searches
• The Dashboards

For the integration to run, information such as authorization and integration values, must be added or updated. 

Update credentials

1. Log into Oomnitza.
2. Click Configuration > Security > Credentials.
3. To search for the credentials, type the name of the credential.
4. Click the credentials record.
5. Click the AUTHORIZATION tab.
6. In the AUTHORIZATION tab, complete these actions:
   1. Ensure OAuth 2.0 is selected as the authorization protocol.
   2. Select Sophos as the SaaS.
   3. Enter your client ID and secret. 
7. Authenticate and click Save. 

See Extended Connector for Sophos Endpoint Security 

Update the values for the data region and tenant ID global variables.  

1. Log into Oomnitza.
2. From the Configuration menu, click General > Global Settings.
3. Update the values for the following global variables:
   • Sophos.DataRegion
   • Sophos.TenantId 
4. Save your changes.

Update the integration

1. From the Configuration menu, click Integrations, and then click Integrations List View .
2. Click the integration tile for the Sophos Endpoint Security integration.
3. Go to the Connect page and make the following changes:
4. Change the value selected for Integration preference. If this is the first time that you have run the integration, select Create & Update.
5. To identify who made the integration changes, add a valid username in the Integration user field.
6. Enter the Sophos tenant ID.
7. Enter the data region. For example, if the URL for your data region is https://api- us03 .central.sophos.com . You enter us03 as the data region.
8. When you complete making your changes, click NEXT until you get to the final page and then click FINISH.

Add fields to the Assets view

New fields are not automatically listed on the Assets page.

Add new fields to the Assets page

1. Click Assets.
2. Click Add.
3. Click Configure the view .
4. Click + Add Fields.
5. Select the fields that you want to add and click ADD.
6. Click List View Configs .
7. Select the fields.

Tip
If you want to add multiple new fields that are related, create a group in screen builder and add the fields to the group.