Increased API functionality
Request from customer:
A better API to ServiceNow than just sending emails into it would be great. The ability to flip a switch in Central, tell it about my ServiceNow instance and it automatically pre-populates a SNOW incident with all the details of each alert would be extremely useful.
This is a no brainer. Additionally, why we can't force scan, quarantine, etc via API is really odd to me. Sophos likely won't be in my environment for much longer unless they begin to offer real enterprise tool options.
Andrea Anolli commented
Totally agree with this request. Please prioritize
Michael Percival commented
Rest API to allow checking of protected assets against other sources is a must for a enterprise product, used to interrogate the SQL DB for this when on prem. Also the ability to make changes via Rest API is also a must to allow automated change of policies based on various factors external to sophos central
Came here looking for an answer to the question "Can we automate anything in Sophos Central through an API?"
And the answer is no. I'm sure for people who are concerned with it are happy with the event stream to their SIEM solution, but all I needed from this was to not have to make manual changes in the UI.
Here's my use case: in the old Sophos management, I could set a policy to an OU. Anything moves in, it gets the policy. Why can't I do that in the new one?
Absolutely agree with this one. The current API is incredibly limited, and the endpoints JSON is even missing data which should be present. Not fit for purpose. As someone else has pointed out, a full restful API for reporting purposes is a prerequisite for all modern software. Please prioritise.
a rest api for integrations and automation is now a pre-requisite for any tool, i'd also liike this prioritized
Also be good to query the device status as well as the status of corresponding services.
John H commented
I wholeheartedly agree! We are building out our ServiceNow instance and would love to marry these two tools together.
Brent Concialdi commented
This is a great idea, any update on this?