Skip to content

Installing Sophos Linux Sensor

Sophos Linux Sensor (SLS) is a lightweight agent you can install on Linux hosts. It collects events from the hosts to trigger alert generation or automated response. You can install SLS wherever you have Linux, in a public or private cloud, containers or VMs, on-premise bare metal, and across different kernel versions and Linux distributions. SLS lets you send event data to Sophos Central and integrates with your existing logging and alerting infrastructure.

Sophos distributes SLS releases as Debian and RPM packages and as Docker images. You can access Debian and RPM packages in the Sophos package repository and Docker images in the Sophos Docker registry. This includes support for installing on Kubernetes using Helm Charts.

Installation guides