Reference Guide:
Activate the Sophos Endpoint Connector
Overview
Sophos is a worldwide leader in advanced cybersecurity solutions, including managed
detection and Response (MDR) services and endpoint, network, email, and cloud security
technologies that help organizations defeat cyberattacks. Sophos’ services and products
connect through its cloud-based Sophos Central management console. At Cowbell, we utilize aconnection with your Sophos Central account to evaluate your organization’s endpoint security
measures and configuration, offering suggestions to improve your cybersecurity posture.

Prerequisites
You must be a Sophos Central administrator with Super Admin privileges to generate therequired Sophos Central API credentials.

Getting Started
Add New Credentials
We need new Sophos Central API credentials with read-only permissions to establish aconnection with the Sophos Endpoint Connector.

1. Log into Sophos Central.
2. Select Global Settings from the side
menu (see Figure 1).
3. Click API Credentials Management(see Figure 1).
4. Accept the Terms of Use Agreementand Privacy Policy.

© 2023 Cowbell Cyber, Inc. | All Rights Reserved | www.cowbell.insure | 1-833-633-8666
Cowbell Insurance Agency LLC, State Licenses: https://cowbell.insure/state-licenses/

5. Click Add Credential (see Figure 2).
6. Enter a Credential Name (see Figure 3)
E.g., “Cowbell Insights.”
7. Add a Description (see Figure 3).
8. Select Service Principal ReadOnly
from the Role drop-down menu
(see Figure 3).
9. Click Add (see Figure 3).
10. Copy and store the Client ID fromthe API Credentials Summary page(see Figure 4).
11. Click Show Client Secret(see Figure 4).
12. Copy and store the Client Secret.
Note: The Client Secret will only bevisible once. You will need the Client ID
and the Client Secret to activate theconnector on the Cowbell Platform.

Activate the Sophos Endpoint Connector on the Cowbell Platform
To activate the connector, you need to provide the API credentials for your Sophos Endpoint
Connector on the Cowbell Platform.
1. Log into the Cowbell Platform.
2. Click the Connectors tab.

© 2023 Cowbell Cyber, Inc. | All Rights Reserved | www.cowbell.insure | 1-833-633-8666
Cowbell Insurance Agency LLC, State Licenses: https://cowbell.insure/state-licenses/

3. Click the Available button on theSophos Endpoint Connector.
4. Read and accept Cowbell’s Privacy
Policy.
5. Enter the Client ID (see Figure 5).
6. Enter the Client Secret (see Figure 5).
7. Click Next (see Figure 5).

Note: The connector will begin in the initializing stage. The status will change to “Connected”
when the process is complete. You can delete the connector on the Cowebell Platform at anytime. Deleting the connector will automatically delete your Sophos data from the CowbellPlatform. You can also delete the API credentials from Sophos Central at any time to revoke
access to your Sophos data.

References and Resources
Learn more about Sophos API credentials and activating the connector.
[Documentation] Sophos API Credentials Management[Video] Enabling the Cowbell Connector© 2023 Cowbell Cyber, Inc. | All Rights Reserved | www.cowbell.insure | 1-833-633-8666
Cowbell Insurance Agency LLC, State Licenses: https://cowbell.insure/state-licenses/