Skip to content

Sophos Endpoint Protection (using REST API) - not connecting #13621

@gh1y4s

Description

@gh1y4s

Bug
When configuring the Sophos connector, I have input the required parameters: Tenant ID, Data Region, Client ID, Client Secret and when I go to click connect the connector does not connect deploy or indicate an issue that could be causing this.

I have confirmed that that the Service Principal has the role ServicePrincipal ReadOnly and when making a cURL request using the Client ID and Secret, I am able to successfully retrieve an access token confirming their is no issue with the Client ID / Secret.

Expected behavior
Connector to successfully connect or an error message indicating what the issue is.

Additional Context
The solution has been reinstalled and I have further tested this by attempting to configure the connector in a separate Azure / Sophos tenant and still experiencing the same issue.

This has been attempted by multiple individuals from my team with the same result:

Solution: https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Sophos%20Endpoint%20Protection/Data%20Connectors/SophosEP_ccp

Metadata

Metadata

Labels

ConnectorConnector specialty review needed

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions