Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Sophos Enterprise Console

JSA DSM for Sophos Enterprise Console provides two options for gathering events by using Java database connectivity (JDBC).

JSA records all relevant anti-virus events.

To use the Sophos Enterprise Console JDBC protocol, the Sophos Reporting Interface must be installed with your Sophos Enterprise Console. If you do not have the Sophos Reporting Interface, configure JSA by using the JDBC protocol. For information about installing the Sophos Reporting Interface, go to the Sophos Enterprise Console documentation .

To integrate Sophos Enterprise Console with JSA, complete the following steps:

  1. Configuring the Database View for Sophos Enterprise Console.

  2. Optional: If the Sophos Reporting Interface is installed on your Sophos Enterprise console, use the Sophos Enterprise Console JDBC log source to collect events. For more information, see Sophos Enterprise Console JDBC Log Source Parameters for Sophos Enterprise Console.

  3. Optional: If the Sophos Reporting Interface is not installed on your Sophos Enterprise Console, use the standard JDBC protocol to collect events. For more information, see JDBC Log Source Parameters for Sophos Enterprise Console.

Sophos Enterprise Console DSM Specifications

When you configure the Sophos Enterprise DSM, understanding the specifications for the DSM can help ensure a successful integration. For example, knowing what the supported version of Sophos Enterprise Console is before you begin can help reduce frustration during the configuration process.

The following table describes the specifications for the Sophos Enterprise Console DSM.

Table 1: Sophos Enterprise Console DSM Specifications

Specification

Value

Manufacturer

Sophos

DSM name

Sophos Enterprise Console

RPM file name

DSM-SophosEntepriseConsole-JSA_version-build_number.noarch.rpm

Supported version

4.5.1 and 5.1

Protocols

Sophos Enterprise Console JDBC

JDBC

Event format

JDBC

Recorded event types

all relevant anti-virus events

Automatically discovered?

No

Includes identity?

No

Includes custom properties?

No

More information

Sophos Enterprise Console documentation

Configuring the Database View for Sophos Enterprise Console

To collect events in JSA, you need to configure a database view on Sophos Enterprise Console:

  1. Log in to your Sophos Enterprise Console device command-line interface (CLI).

  2. Type the following command to create a custom view in your Sophos database to support JSA:

    Where <DatabaseName> is the name of the Sophos database.

    Note:

    The database name must not contain any spaces.

After you create your custom view, you must configure JSA to receive event information that uses the JDBC protocol or the Sophos Enterprise Console JDBC protocol.

Sophos Enterprise Console JDBC Log Source Parameters for Sophos Enterprise Console

If JSA does not automatically detect the log source, add a Sophos Enterprise Console log source on the JSA Console by using the Sophos Enterprise Console JDBC protocol.

When using the Sophos Enterprise Console JDBC protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect Sophos Enterprise Console JDBC events from Sophos:

Table 2: Sophos Enterprise Console JDBC log source parameters for the Sophos Enterprise Console DSM

Parameter

Value

Log Source Type

Sophos Enterprise Console

Protocol Configuration

Sophos Enterprise Console JDBC

Log Source Identifier

Type the identifier for the log source. Type the log source identifier in the following format:

<Sophos Database>@<Sophos Databas Server IP or Host Name>, where:

  • <Sophos Database> is the database name, as entered in the Database Name parameter.

  • <Sophos Database Server IP or Host Name> is the host name or IP address for this log source, as entered in the IP or Hostname parameter.

When you define a name for your log source identifier, you must use the values of the Sophos Database and Database Server IP address or host name from the Management Enterprise Console.

JDBC Log Source Parameters for Sophos Enterprise Console

If the Sophos Enterprise Console does not have the Sophos Reporting Interface installed, use the standard JDBC protocol to collect events in JSA.

If JSA does not automatically detect the log source, add a Sophos Enterprise Console log source on the JSA Console.

When using the JDBC protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect JDBC events from Sophos Enterprise Console:

Table 3: JDBC Log Source Parameters for the Sophos Enterprise Console DSM

Parameter

Value

Log Source Type

Sophos Enterprise Console

Protocol Configuration

JDBC

Log Source Identifier

Type the IP address or host name for the log source as an identifier for events from your Sophos Enterprise Console devices.