Skip to content
Find out how we support MDR.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=jamf

Integrate Jamf Protect

API Endpoint

You must have the Endpoint license pack to use this feature.

You can integrate Jamf Protect with Sophos Central so that it sends data to Sophos for analysis.

This is an API-based integration. You'll need details of the Jamf Protect API client.

The key steps are as follows:

  • Create an API client in Jamf Protect and save the details.
  • Configure an integration in Sophos Central.

Create an API client in Jamf Protect

Before you can interact with the Jamf Protect API, you must create an API client.

To create an API client, do as follows:

  1. In Jamf Protect, go to Administrative > API Clients.
  2. Click Create API Client.
  3. Enter a name for your API client.
  4. Assign a custom role to the API client with permissions to read Alerts.

  5. Copy the API client password for later use.

    This value will not be displayed again by Jamf Protect.

    API client password on screen.

  6. Your API client configuration and endpoint information is shown. Copy the Client ID.

    API client info.

Next, you configure an integration in Sophos Central.

Configure an integration

To integrate Jamf Protect with Sophos Central, do as follows:

  1. In Sophos Central, go to Threat Analysis Center > Integrations > Marketplace.

  2. Click Jamf Protect.

    The Jamf Protect page opens. You can configure integrations here and see a list of any you've already configured.

  3. In Data Ingest (Security Alerts), click Add Configuration.

    Note

    If this is the first integration you've added, we'll ask for details about your internal domains and IPs. See Provide your domain and IP details.

  4. In Integration steps, do as follows:

    1. Enter the Integration name and Integration description.
    2. Enter the Base URL. This is your Jamf Protect tenant URL in the following form: https://<your-organization>.protect.jamfcloud.com.
    3. Enter the API Client ID and Password you got from Jamf Protect earlier.

  5. Click Save

We create the integration and it appears in your list. If its status icon shows a green tick, your data should appear in the Sophos Data Lake after validation.

More information

Jamf Protect API