Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/fusion/customer/help/en-us/index.html?contextId=xdr-integration-symantecbluecoatproxysg

Symantec (Blue Coat) ProxySG

You can integrate Broadcom Symantec ProxySG (formerly Blue Coat ProxySG) with Sophos XDR so that it sends data to Sophos for analysis.

This page gives you an overview of the integration.

Symantec ProxySG product overview

Broadcom Symantec ProxySG (formerly Blue Coat ProxySG) is an on-premises secure web gateway appliance that protects organizations across web, social media, applications, and mobile networks, including SSL/HTTPS traffic inspection, URL filtering, and web threat protection.

What we ingest

Sophos XDR collects Symantec ProxySG syslog data by listening for messages your proxy forwards to a Sophos XDR data collector. The following log categories are collected:

  • Web activity: Web proxy access transactions that the appliance processes.

Event and data types

We ingest the following event and data types from Symantec ProxySG:

  • Web activity: Web proxy access transactions, including source and destination, HTTP method, URL, status code, and category. Normalized to HTTP telemetry.

Data provided by this integration

Data provided by Symantec ProxySG gets normalized to the following schemas:

  • http

For more information about using schemas in Data Lake Search, see Schemas and logical types.

Vendor documentation