AWS Instances

View your Amazon Web Services EC2 instances.

We recommend using Sophos Cloud Optix for comprehensive visibility of AWS resources. Sophos Cloud Optix for EDR features are included with the Intercept X Advanced for Server with EDR license.

Go to Server Protection > Servers > Servers on AWS and click AWS Instances.

You can view the Amazon Web Services EC2 instances associated with your Sophos Central account.

Note If you have switched on AWS Security Hub and connected your AWS Account to Sophos Central we will send some alert data to the AWS Security Hub.

If you can't see your AWS instances here, click AWS account connections (on the right of the screen). For details, see Amazon Web Services Accounts.

You can filter your AWS instances to display those with no Sophos product, those with Server Protection installed or containing a Sophos UTM, or those with a good, bad or medium agent status. You can also filter by AWS region.

The AWS instances are listed with these details:

  • Instance ID: Click on the ID to view the details of the instance and to access the server's Summary tab or the UTM web admin.
  • Lifecycle Status: This shows which state of the AWS lifecycle the instance is in. See Instance Lifecycle.
  • Server Name
  • Sophos Product: This shows whether the instance has a Sophos agent installed or contains a Sophos UTM. Click on the instance ID to see more information about the instance.
  • AWS Account
  • AWS Region
  • Auto Scaling Group: Click on the group name to view the server group details.