Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/fusion/customer/help/en-us/index.html?contextId=xdr-integration-secutec-setup

Integrate Secutec SecureDNS

You can integrate Secutec SecureDNS with Sophos XDR so that it sends data to Sophos for analysis.

Key steps

The key steps in a Secutec SecureDNS integration are as follows:

  • Get an API token from Secutec.
  • Configure the integration in Sophos XDR.

Requirements

The following is required for Secutec SecureDNS configuration:

  • An Organization Manager account in the Secutec Portal.

Add a Secutec SecureDNS integration

To integrate Secutec SecureDNS, you must first gather certain details from Secutec, then provide them in Sophos XDR.

Get an API token from Secutec

To get the Secutec SecureDNS API token you need for integration, do as follows:

  1. Sign in to the Secutec Portal.
  2. In the menu, click Users.
  3. Click Create > Technical User.
  4. Select your organization, enter a name, and enter an end date for the user account's validity.

  5. Copy the Access token and save it.

    The token is shown once only. You can't view it again later, but you can change it if necessary.

  6. The new user is shown in the user list. If you need to change the token or the validity end date, you must be signed in as that user.

Next, you configure an integration in Sophos XDR.

Configure the integration in Sophos XDR

To integrate Secutec SecureDNS with Sophos XDR, do as follows:

  1. In Sophos Fusion, go to Security Operations > Integrations > Marketplace.

  2. Click Secutec SecureDNS.

    The Secutec SecureDNS page opens. You can configure integrations here and see a list of any you've already configured.

  3. In Configured integrations, click Add new.

  4. In Add an integration, do as follows:

    1. Enter a name for the integration.
    2. Enter your organization's Base URL. By default, this is https://api.portal.secutec.com.
    3. Enter the API Token you got from Secutec.

  5. Click Done.

The new integration appears under Configured integrations. If its status icon is a green tick, your data should appear in the Sophos Data Lake after validation.

Additional resources

For more information on configuring Secutec SecureDNS, see the following documents: