Secutec

API

You can integrate Secutec with Sophos Central so that it sends data to Sophos for analysis.

This is an API integration. You need an API token and URL from Secutec.

The key steps are as follows:

• Get an API token from Secutec.
• Add an integration in Sophos Central.

Get an API token

To get the API token, do as follows:

1. Sign in to Secutec as Organization Manager.

2. Go to Users

   

3. Click the arrow next to Create and select Technical User.

   

4. Select your organization, enter a name, and enter an end date for the user account's validity.

   

5. Copy the Access token and save it.

   The token is shown once only. You can't get it back later. but you can change it if necessary.

   

The new user is shown in the user list. If you need to change the token or the validity end date, you must be signed in as that user.

Add an integration

To integrate Secutec with Sophos Central, do as follows:

1. In Sophos Central, go to Threat Analysis Center > Integrations > Marketplace.

2. Click Secutec.

   The Secutec page opens. You can configure integrations here and see a list of any you've already configured.

3. In Data Ingest (Security Alerts), click Add Configuration.

   Note

   If this is the first integration you've added, we'll ask for details about your internal domains and IPs. See My domains and IPs.

4. In Integration steps, do as follows:

   1. Enter a name and a description for the integration.

   2. Enter the Base URL.

      The URL for Secutec is https://api.portal.secutec.com.

   3. Enter the API token. This is the access token you generated earlier.

5. Click Save

We create the integration and it appears in your list.

If your integration shows as Connected, your data should appear in the Sophos Data Lake after validation.