When configured, the Blumira integration with Sophos XG Firewall appliance will stream security event logs to the Blumira service for threat detection and actionable response.
Learn more about enabling Blumira’s Dynamic Block Lists to block malicious source IP addresses and domains for automated threat response.
Related Integration: Sophos Central
This article provides information on how to set up the Sophos XG Firewall to send logs to Blumira’s sensor.
Start by logging into your Sophos XG Firewall and follow these steps:
Sophos documentation on how to add a Syslog server: https://community.sophos.com/kb/en-us/123184
Next, specify which Sophos logs get sent to the Blumira sensor:
Try out Blumira’s automated detection & response platform for free and deploy a cloud SIEM in hours.