Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/fusion/customer/help/en-us/index.html?contextId=xdr-integration-armis-setup

Integrate Armis

You can integrate Armis with Sophos XDR so that it sends data to Sophos for analysis.

Key steps

The key steps in an Armis integration are as follows:

  • Get a secret key and base URL from Armis.
  • Configure the integration in Sophos XDR.

Requirements

The following is required for Armis configuration:

  • Access to the Armis console.

Add an Armis integration

To integrate Armis, you must first gather certain details from Armis, then provide them in Sophos XDR.

Get a secret key and base URL from Armis

To get the Armis API details you need for integration, do as follows:

  1. Sign in to the Armis console.
  2. Go to Settings > API Management.
  3. On the API Management page, click Create to create a secret key.

  4. Click Show to show the key.

    Copy the key and save it. You'll need to use it later in Sophos Fusion.

  5. Click OK.

  6. Make note of your Armis base URL, which consists of your organization name or Armis instance name followed by the Armis domain. For example: https://customer.armis.com.

Next, you configure an integration in Sophos XDR.

Configure the integration in Sophos XDR

To integrate Armis with Sophos XDR, do as follows:

  1. In Sophos Fusion, go to Security Operations > Integrations > Marketplace.

  2. Click Armis.

    The Armis page opens. You can configure integrations here and see a list of any you've already configured.

  3. In Configured integrations, click Add new.

  4. In Add an integration, do as follows:

    1. Enter a name for the integration.
    2. Enter the Base URL and Secret Key you obtained from Armis.

  5. Click Done.

The new integration appears under Configured integrations. After provisioning is complete, a green tick indicates that the integration is working correctly and your data should appear in the Sophos Data Lake after validation.

For more information about integration statuses, see View health status of an integration.