Comtech Systems
Home 
About Comtech Systems 
service 
Make An Enquiry 
Sophos Firewall - Splunk integration
Posted On May 18, 2021The Sophos product team is excited to announce the launch of our new Splunk integration and applications for Sophos Firewall's early access programme (EAP).
Splunk is a world leader in data management and security information and event management (SIEM), and it's the ideal complement to Sophos Firewall and Sophos Central for storing and analysing on-premise firewall logs.The Splunk integration with Sophos Firewall involves two Splunk applications:
• Sophos App for Splunk, which offers a series of pre-packaged dashboards for visualising data from your Sophos Firewall in Splunk
• Sophos Firewall Technology Add-on (TA) for Splunk, which parses the data obtained from Sophos Firewall
Threats
• Firewall operation and utilization
• Web traffic, latency, and activity
• Top applications and clients
• TLS encryption and traffic forms
• Users and links
• VPN
This latest Sophos Firewall Splunk integration is a great complement to Sophos Central cloud-based firewall reporting, and it's useful for on-premise reporting or incorporating Sophos Firewall into your Splunk SIEM solution.
What do you do first?
To participate in this early access programme, your Sophos Firewall must be running SFOS v18 MR1 build 396 or later.
The Sophos Community has a complete list of pre-requisites, download links, and setup instructions.
If you try on these features with our expert guidance, you can quickly understand them. If you understand how things work, you can save time and money while still increasing the protection of your business.
Join us for a trial session where cybersecurity analysts can illustrate these features based on your requirements. Comtech System is gold partners of Sophos which avail you all the benefits associated.
;)
