Recommended Agent: On-Demand
Supported Agents: On-Demand or Self-Hosted
Is Auto-Discovered By: N/A
Can Auto-Discover: Sophos Central Child Inspectors
Parent/Child Type Inspector: Yes
Inspection via: API
Data Summary: Here
Liongard's Sophos Central Inspector returns details of licensing, deployment, and more about Sophos endpoint protection software managed from Sophos Central.
Liongard does not currently support setting up Sophos Central Inspectors to run against tenants that are not tied to the parent account.
Video isn't playing? Click here.
API Key Expiration
Sophos Central sets a 36-month duration of all API Keys. Once an API Key expires, this process will need to be performed again.
- Log in to your Sophos Central account: Sophos Central Partner Login
- Navigate to Settings & Policies on the left-hand side
- Navigate to API Credentials
- Select Add Credential in the top right corner of the page
- Create a name for your Credential and select Add
- Copy the Client ID and Secret Key
API Secret Key
Make sure to save/record the key somewhere secure as it will only be shown once.
Since Sophos Central is a multi-tenant system where a single portal is used to manage many Environments, you will set up a single "Parent" Inspector with the access credentials for your Sophos Central portal that will then auto-discover "Child" Inspectors for each Environment.
In Liongard, navigate to Admin > Inspectors > Production > Navigate to the Sophos Central Inspector > Select Add System.
Fill in the following information:
- Environment: Select your MSP's Environment
- Friendly Name: Suggested Naming: [MSP Name] Sophos Central Parent
- Agent: Select On-Demand Agent
- Inspector Version: Latest
- Client ID: Enter the ClientID key created in preparation setup
- Client Secret: Enter the Client Secret created in preparation setup
- Scheduling: The Inspector will default to run once a day at the time the Inspector is set up. Here you can adjust the schedule
Select Save. The Inspector will now be triggered to run within the minute.
After the first run of the Parent Inspector, your client Sophos Central Environments will be Auto-Discovered in the Discovered Systems tab on the Inspectors > Production> Sophos Central page.
Navigate to the Discovered Systems tab in your Inspectors > Production> Sophos Central page
- Activate or Archive your Discovered Systems by ensuring that they're mapped to the correct Environment > Check the checkbox to the left of Inspector(s) > Select the Actions drop down menu > Activate Launchpoints
If you would like this Inspector's data to be sent to ConnectWise and/or IT Glue, turn on Flexible Assets/Configurations for this Inspector:
- ConnectWise: Admin > Integrations > ConnectWise > Configuration Types > Confirm the "Configuration Auto-Updating" toggle is enabled
- IT Glue: Admin > Integrations > IT Glue > Flexible Assets > Confirm the "Flexible Asset Auto-Updating" toggle is enabled
- How do I resolve an "Unidentified error for call: 403 on the call/endpoint/v1/endpoints?pageTotal=true"?
This is a known issue with Sophos Central's API. To resolve this issue,
- Navigate to the Account Details in the partner's Sophos Central portal.
- Navigate to the Sophos Support tab.
- Toggle the Partner's Assistance off. Select Save.
- Toggle the Partner's Assitance on. Select Save.
- Then, rerun the Liongard Liongard Inspector.
Updated about a month ago