Solution Brief

Sophos Integrations: Firewall
Enhance the visibility of your network perimeter

Threat actors continuously target external attack surfaces, probing and exploiting vulnerabilities in cyberdefenses. Sophos XDR and MDR integrate seamlessly with Sophos and third-party firewall solutions
to analyze security events, monitor incoming and outgoing traffic for signs of malicious behavior, andproactively counter threats early in the attack cycle to safeguard your critical assets from compromise.

Use Cases
1 | EXTEND ATTACK SURFACE VISIBILITY

Integrations include

Desired Outcome: Capture firewall security events to analyze potential exposure orbreaches on the network edge.
Solution: The Sophos XDR and MDR Firewall integrations ingest and analyze edge
security events caused by external threats, requiring no tuning or training. Detected
events undergo a meticulous five-step process to filter noisy alerts, normalize complex
telemetry, enrich data with threat intelligence, correlate with data from other security
tools, and score to determine the risk.
2 | ENHANCE INCIDENT RESPONSEand more.

Desired Outcome: Identify suspicious activities, such as data exfiltration and malware
beaconing, to shorten response time.
Solution: Firewall telemetry empowers you and the Sophos MDR service to accelerate
incident prioritization and response. Correlate suspicious network traffic patterns, suchas initial access, Command and Control communications, and contextual data from othertools, to automatically generate cases for investigation. Analysts can apply host-based IP
blocking and additional actions to neutralize threats.
3 | REDUCE ALERT FATIGUE
Desired Outcome: Offload high-volume alert inspection to Sophos threat experts.

A Customers’ Choice in the 2023
Gartner®, Voice of the Customer
for Managed Detection andResponse Services report

Solution: Network security tools can generate huge volumes of telemetry data. Allocatingtime to analyze and verify threat activity can be time-consuming, and many organizations
lack the resources needed to do so. The Sophos XDR and MDR Firewall integrations
ensure security events generated by your firewalls are inspected and reviewed formalicious intent, enabling your team to focus on business enablement.
4 | ADDRESS CYBER INSURANCE AND COMPLIANCE GOALSDesired Outcome: Incorporate security controls that help meet mandated security
posture requirements.
Solution: Storing and inspecting security events is critical to many cyber insurance
and compliance frameworks, which encourage using security information and event
management (SIEM) tools. The Sophos XDR and MDR Firewall integrations help you
address regulatory requirements with comprehensive logging, monitoring, effective
threat response against cyberattacks, and validating security posture efforts.

A Leader in Frost & Sullivan’s
2024 Frost Radar report forGlobal Managed Detection andResponseTo learn more, visit
www.sophos.com/mdr
www.sophos.com/xdr

Gartner, Voice of the Customer for Managed Detection and Response Services, 28 July 2023. The Gartner Peer Insights Logo is a trademark and service mark of Gartner,
Inc., and/or its affiliates, and is used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on theirown experiences with the vendors listed on the platform, should not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner
does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed or implied, with respect to this content, about its accuracy orcompleteness, including any warranties of merchantability or fitness for a particular purpose.
© Copyright 2024. Sophos Ltd. All rights reserved. Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK
Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.

2024-07-23 SB-EN (PS)