Sophos can be added as a ScalePad integration to sync your clients and their devices from your Sophos EDR into ScalePad. This article covers the steps required to add Sophos as an integration.
|
Who can use this feature?
|
|
What you'll need:
|
Step 1: Generating your Sophos API credentials
Generate a Sophos API Client ID and Client Secret using a Sophos Super Admin account.
For a single tenant, create the credential in Sophos Central with the Service Principal Read-Only role. For instructions, see Sophos: API Credentials.
If you manage multiple Sophos tenants and want to sync all of them, create the credential in Sophos Central Partner instead. For instructions, see Sophos: Getting Started as a Partner.
Step 2: Adding Sophos as a ScalePad integration
- Log in to ScalePad at app.scalepad.com.
- In the ScalePad Hub, click Integrations.
- Click the Add Integration button.
- Use the search bar to find Sophos EDR in the Cyber Security category and click the tile.
- Enter the Client ID and Client Secret from Step 1.
- Click Connect now to connect your Sophos account.
- Review the detected Sophos tenants and map each one to the ScalePad client it should sync to.
- Click Save and sync now to complete the integration.
| Note: Sophos generally reports serial numbers only for macOS endpoints. Enable Sync assets without serial numbers to include Windows and Linux endpoints whose Sophos data does not contain a serial number. |
Your Sophos clients and their devices will be available in ScalePad.
What syncs from Sophos
For each device, Sophos syncs the following into ScalePad:
- Client name
- Device ID
- Name
- Hostname
- Serial number
- Device type
- Operating system
- Last logged-in user
- Last seen
- MAC addresses
| Note: If Sophos syncs successfully but its data doesn’t appear in a Deliverable, click the gear icon on the Deliverable’s Risk Management section, turn on Sophos Endpoint Security, then refresh the Deliverable. |
Sophos data in Lifecycle Manager Deliverables
The Sophos integration includes Detection and Response (D&R) data. The Sophos Endpoint Security report in Lifecycle Manager Deliverables pulls detections, alerts, and open cases from Sophos Central.
Detections are available only for clients with a Sophos EDR or XDR license. If a client has neither license, the Detections block displays Unavailable.
Hardware sync preferences
In the integration’s Preferences > Hardware settings, choose Sync assets without serial numbers to include devices whose source does not provide a serial number. Some information may be unavailable for these assets. Leave the option cleared to exclude devices with a blank serial number, then save your settings and sync.
If an expected device is missing, check this preference and the device’s serial number in the source before reconnecting the integration.
| Any questions? Reach out to our ScalePad support team by submitting a support ticket. |
 NEW Join our MSP Power-Ups - Free 15-minute micro-workshops + live Q&A with our Lifecycle Manager experts. Sign up here to reserve your spot. |
Related to
