Skip to content

Commit f28cff2

Browse files
v-sabirajv-sabiraj
authored
Merge pull request Azure#13001 from Azure/v-sabiraj-sophosEPupdate
Update Sophos Endpoint Protection to version 3.0.6
2 parents f2897f0 + b4642b7 commit f28cff2

File tree

4 files changed

+40
-29
lines changed

4 files changed

+40
-29
lines changed

‎Solutions/Sophos Endpoint Protection/Package/3.0.6.zip‎

12.3 KB
Binary file not shown.

‎Solutions/Sophos Endpoint Protection/Package/createUiDefinition.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@
6767
"name": "dataconnectors2-text",
6868
"type": "Microsoft.Common.TextBlock",
6969
"options": {
70-
"text": "This Solution installs the data connector for Sophos Endpoint Protection. You can get Sophos Endpoint Protection data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
70+
"text": "This Solution installs the data connector for Sophos Endpoint Protection (using REST API). You can get Sophos Endpoint Protection (using REST API) data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
7171
}
7272
},
7373
{

‎Solutions/Sophos Endpoint Protection/Package/mainTemplate.json‎

Lines changed: 38 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@
4747
"email": "support@microsoft.com",
4848
"_email": "[variables('email')]",
4949
"_solutionName": "Sophos Endpoint Protection",
50-
"_solutionVersion": "3.0.5",
50+
"_solutionVersion": "3.0.6",
5151
"solutionId": "azuresentinel.azure-sentinel-solution-sophosep",
5252
"_solutionId": "[variables('solutionId')]",
5353
"parserObject1": {
@@ -86,7 +86,7 @@
8686
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
8787
],
8888
"properties": {
89-
"description": "SophosEPEvent Data Parser with template version 3.0.5",
89+
"description": "SophosEPEvent Data Parser with template version 3.0.6",
9090
"mainTemplate": {
9191
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
9292
"contentVersion": "[variables('parserObject1').parserVersion1]",
@@ -218,7 +218,7 @@
218218
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
219219
],
220220
"properties": {
221-
"description": "Sophos Endpoint Protection data connector with template version 3.0.5",
221+
"description": "Sophos Endpoint Protection data connector with template version 3.0.6",
222222
"mainTemplate": {
223223
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
224224
"contentVersion": "[variables('dataConnectorVersion1')]",
@@ -984,6 +984,7 @@
984984
"apiVersion": "2022-10-01",
985985
"type": "Microsoft.OperationalInsights/workspaces/tables",
986986
"location": "[parameters('workspace-location')]",
987+
"kind": null,
987988
"properties": {
988989
"schema": {
989990
"name": "SophosEPAlerts_CL",
@@ -1067,6 +1068,7 @@
10671068
"apiVersion": "2022-10-01",
10681069
"type": "Microsoft.OperationalInsights/workspaces/tables",
10691070
"location": "[parameters('workspace-location')]",
1071+
"kind": null,
10701072
"properties": {
10711073
"schema": {
10721074
"name": "SophosEPEvents_CL",
@@ -1379,29 +1381,22 @@
13791381
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
13801382
"contentVersion": "[variables('dataConnectorCCPVersion')]",
13811383
"parameters": {
1382-
"ClientId": {
1383-
"defaultValue": "-NA-",
1384-
"type": "securestring",
1385-
"minLength": 1
1386-
},
1387-
"ClientSecret": {
1388-
"defaultValue": "-NA-",
1389-
"type": "securestring",
1390-
"minLength": 1
1384+
"guidValue": {
1385+
"defaultValue": "[[newGuid()]",
1386+
"type": "securestring"
13911387
},
1392-
"sophosRegion": {
1393-
"defaultValue": "Enter sophosRegion value",
1394-
"type": "string",
1395-
"minLength": 1
1388+
"innerWorkspace": {
1389+
"defaultValue": "[parameters('workspace')]",
1390+
"type": "securestring"
13961391
},
13971392
"connectorDefinitionName": {
13981393
"defaultValue": "Sophos Endpoint Protection (using REST API)",
1399-
"type": "string",
1394+
"type": "securestring",
14001395
"minLength": 1
14011396
},
14021397
"workspace": {
14031398
"defaultValue": "[parameters('workspace')]",
1404-
"type": "string"
1399+
"type": "securestring"
14051400
},
14061401
"dcrConfig": {
14071402
"defaultValue": {
@@ -1412,7 +1407,22 @@
14121407
},
14131408
"sophosTenantId": {
14141409
"defaultValue": "sophosTenantId",
1415-
"type": "string",
1410+
"type": "securestring",
1411+
"minLength": 1
1412+
},
1413+
"sophosRegion": {
1414+
"defaultValue": "sophosRegion",
1415+
"type": "securestring",
1416+
"minLength": 1
1417+
},
1418+
"ClientId": {
1419+
"defaultValue": "-NA-",
1420+
"type": "securestring",
1421+
"minLength": 1
1422+
},
1423+
"ClientSecret": {
1424+
"defaultValue": "-NA-",
1425+
"type": "securestring",
14161426
"minLength": 1
14171427
},
14181428
"AuthorizationCode": {
@@ -1452,7 +1462,7 @@
14521462
}
14531463
},
14541464
{
1455-
"name": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/', 'SophosEndpointProtectionCCPAlertsPolling')]",
1465+
"name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'SophosEndpointProtectionCCPAlertsPolling', parameters('guidValue'))]",
14561466
"apiVersion": "2023-02-01-preview",
14571467
"type": "Microsoft.OperationalInsights/workspaces/providers/dataConnectors",
14581468
"location": "[parameters('workspace-location')]",
@@ -1467,8 +1477,8 @@
14671477
},
14681478
"auth": {
14691479
"type": "OAuth2",
1470-
"ClientSecret": "[[parameters('ClientSecret')]",
1471-
"ClientId": "[[parameters('ClientId')]",
1480+
"ClientSecret": "[[parameters('clientSecret')]",
1481+
"ClientId": "[[parameters('clientId')]",
14721482
"TokenEndpoint": "https://id.sophos.com/api/v2/oauth2/token",
14731483
"tokenEndpointHeaders": {
14741484
"Accept": "application/json",
@@ -1479,7 +1489,7 @@
14791489
"grantType": "client_credentials"
14801490
},
14811491
"request": {
1482-
"apiEndpoint": "[[concat('https://api-', parameters('sophosRegion'), '.central.sophos.com/siem/v1/alerts')]",
1492+
"apiEndpoint": "[[concat('https://api-',parameters('sophosRegion'),'.central.sophos.com/siem/v1/alerts')]",
14831493
"rateLimitQPS": 10,
14841494
"queryWindowInMin": 5,
14851495
"httpMethod": "GET",
@@ -1506,7 +1516,7 @@
15061516
}
15071517
},
15081518
{
1509-
"name": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/', 'SophosEndpointProtectionCCPEventsPolling')]",
1519+
"name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'SophosEndpointProtectionCCPEventsPolling', parameters('guidValue'))]",
15101520
"apiVersion": "2023-02-01-preview",
15111521
"type": "Microsoft.OperationalInsights/workspaces/providers/dataConnectors",
15121522
"location": "[parameters('workspace-location')]",
@@ -1521,8 +1531,8 @@
15211531
},
15221532
"auth": {
15231533
"type": "OAuth2",
1524-
"ClientSecret": "[[parameters('ClientSecret')]",
1525-
"ClientId": "[[parameters('ClientId')]",
1534+
"ClientSecret": "[[parameters('clientSecret')]",
1535+
"ClientId": "[[parameters('clientId')]",
15261536
"TokenEndpoint": "https://id.sophos.com/api/v2/oauth2/token",
15271537
"tokenEndpointHeaders": {
15281538
"Accept": "application/json",
@@ -1533,7 +1543,7 @@
15331543
"grantType": "client_credentials"
15341544
},
15351545
"request": {
1536-
"apiEndpoint": "[[concat('https://api-', parameters('sophosRegion'), '.central.sophos.com/siem/v1/events')]",
1546+
"apiEndpoint": "[[concat('https://api-',parameters('sophosRegion'),'.central.sophos.com/siem/v1/events')]",
15371547
"rateLimitQPS": 10,
15381548
"queryWindowInMin": 5,
15391549
"httpMethod": "GET",
@@ -1575,7 +1585,7 @@
15751585
"apiVersion": "2023-04-01-preview",
15761586
"location": "[parameters('workspace-location')]",
15771587
"properties": {
1578-
"version": "3.0.5",
1588+
"version": "3.0.6",
15791589
"kind": "Solution",
15801590
"contentSchemaVersion": "3.0.0",
15811591
"displayName": "Sophos Endpoint Protection",

‎Solutions/Sophos Endpoint Protection/ReleaseNotes.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
22
|-------------|--------------------------------|--------------------------------------------------------------------|
3+
| 3.0.6 | 23-10-2025 | Updated the solution to be compatible with tool changes for the connection name. |
34
| 3.0.5 | 21-08-2024 | **Data Connector** [Sophos Endpoint Protection (using REST API)] Globally Available|
45
| 3.0.4 | 01-07-2024 | Update files for CCP Connector to fix the connectivity|
56
| 3.0.3 | 25-04-2024 | Repackaged for parser issue with old names |

0 commit comments

Comments
 (0)