Page permalink
Always use the following permalink when referencing this page. It will remain unchanged in future help versions.
https://docs.sophos.com/fusion/customer/help/en-us/index.html?contextId=xdr-integration-products
Your browser doesn’t support copying the link to the clipboard. Please copy it manually.
Products
Explore supported Sophos XDR integrations and read the complete setup instructions.
This section lists the available integrations for each product category. Follow the links for integration overviews and step-by-step instructions.
AWS ALB logs
AWS CloudTrail
AWS CloudWatch Logs
AWS VPC Flow Logs
AWS WAF logs
Abnormal Inbound Email Security
Acronis Cyber Protect
Akamai App & API Protector
Akamai Enterprise Application Access
Akamai Guardicore Segmentation
Amazon GuardDuty
Aruba ClearPass
Aryaka
Auth0
Barracuda CloudGen
Barracuda WAF
BlackBerry CylanceOPTICS
Box
Broadcom (VMware) vCenter
Broadcom Symantec
Cato Networks SASE
Check Point Harmony Email Security
Check Point Quantum Firewall
Cisco ASA
Cisco Duo
Cisco FTD
Cisco IOS and NX-OS
Cisco ISE
Cisco IronPort
Cisco Meraki (API)
Cisco Meraki (syslog)
Cisco Umbrella
Claroty Continuous Threat Detection
Cloudflare SSE
Corelight NDR
CrowdStrike Falcon
CyberArk Privileged Threat Analytics
Darktrace
Dragos Platform
F5 BIG-IP LTM
Forcepoint Next-Generation Firewall
Forcepoint Web Security
Fortinet FortiAnalyzer (API)
Fortinet FortiAnalyzer (syslog)
Fortinet FortiGate
Fortinet FortiWeb
Google Cloud Platform (GCP)
Google Workspace
HTTP Ingest
Imperva Cloud WAF
Imperva WAF Gateway
Infoblox DNS
Ivanti Connect Secure
Jamf Protect
Juniper SRX
Linux servers
ManageEngine ADAudit Plus
McAfee ePO
Microsoft 365 Management Activity API
Microsoft 365 Response Actions
Microsoft Azure Activity Logs
Microsoft Azure Application Gateway
Microsoft Azure Event Hubs
Microsoft Azure Firewall
Microsoft Azure Front Door
Microsoft Azure Network Watcher
Microsoft Azure Storage Account
Microsoft DHCP
Microsoft DNS
Microsoft Defender XDR
Microsoft Entra Activity Reports
Microsoft Entra Risk Detection
Microsoft Graph security API alerts v2
Microsoft IIS
Microsoft Windows Event Log
Mimecast API v2
NetScaler ADC
Netskope SSE
Nozomi Guardian
OPNsense
Okta
Oracle Cloud Infrastructure (OCI)
Orca Security
Palo Alto PAN-OS
Palo Alto Prisma Access
Proofpoint TAP
Rubrik
S3 Ingest - Customer-managed
S3 Ingest - Sophos-Managed (with token)
S3 Ingest - Sophos-Managed (without token)
Salesforce
Secutec
SentinelOne Singularity
SonicWall SonicOS
Sophos Email
Sophos Firewall
Sophos NDR (Physical)
Sophos NDR (Virtual)
Suricata
Symantec (Blue Coat) ProxySG
Thinkst Canary
Trend Micro Deep Security
Trend Micro Vision One
Ubiquiti UniFi
Veeam Backup & Replication
WatchGuard Firebox
Zscaler ZIA
pfSense
No matching integrations found