MDR360 integrations · Network & firewall
DIAMATIX MDR for Sophos NGFW
Sophos Firewall events are collected to add network visibility to DIAMATIX investigations.
Technical details pending DIAMATIX confirmation
Technical overview
Integration specifications
- Category
- Network & firewall
- Availability
- Production Supported
- Ingestion method
- Syslog forwarding
- Capabilities
- Telemetry Ingestion, Detection & Investigation
- Active response
- Notification and guided response
Telemetry collected
- Firewall traffic and threat logs
- IPS / threat-prevention events
- VPN and administrative events
Onboarding prerequisites
- Log forwarding to the DIAMATIX collector
- Relevant security subscriptions enabled on the appliance
- Network path agreed during scoping
How it works
How DIAMATIX SecOps works with it
- 01
Collect
Sophos NGFW signals are brought into SHIELD SIEM/XDR.
- 02
Investigate
DIAMATIX analysts triage, correlate and filter alerts 24/7.
- 03
Respond
Agreed containment or guided response follows your runbook and MDR360 tier.
Scope, capabilities and response actions are confirmed for your environment during scoping.
Back to all integrationsRunning Sophos NGFW?
Tell us about your environment and we will confirm coverage for MDR360.