---
title: Sophos
description: Monitor the health of your Sophos managed endpoints
breadcrumbs: Docs > Integrations > Sophos
---

# Sophos
Supported OS marketplaceIntegration version2.1.0Sophos Dashboard
## Overview{% #overview %}

The Sophos Integration monitors the overall health of your Sophos managed endpoints to make sure your managed devices are in good health. The integration comes pre-built with 1 dashboard that provides a broad overview of several metrics that can be used to monitor the health of your devices. The Sophos Integration also comes with 2 monitors that can be used to alert when a device is no longer in good health, or if one of the Sophos services on the device stops.

### Monitors{% #monitors %}

1. Managed Endpoint Health has Changed
1. Sophos Service on Managed Endpoint is Stopped

### Dashboards{% #dashboards %}

1. RapDev Sophos Dashboard

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **rapdev.sophos.endpoint.registered**(gauge)                                                         | Submitted with a value of 1 for each endpoint and tagged with its various health statuses |
| **rapdev.sophos.endpoint.last\_seen**(gauge)                                                         | Number of seconds since the endpoint last checked into Sophos*Shown as second*            |
| **rapdev.sophos.endpoint.service\_health**(gauge)                                                    | Number of service endpoints checked into Sophos                                           |
| **rapdev.sophos.health\_check.policy.computer.threat\_protection.not\_on\_recommended**(gauge)       | Number of computers not on recommended threat protection                                  |
| **rapdev.sophos.health\_check.policy.computer.threat\_protection.score**(gauge)                      | Score out of 100 for computers passing threat protection checks                           |
| **rapdev.sophos.health\_check.policy.computer.threat\_protection.total**(gauge)                      | Number of computers in total under threat protection checks                               |
| **rapdev.sophos.health\_check.policy.server.server\_threat\_protection.not\_on\_recommended**(gauge) | Number of servers not on recommended threat protection                                    |
| **rapdev.sophos.health\_check.policy.server.server\_threat\_protection.score**(gauge)                | Score out of 100 for servers passing threat protection checks                             |
| **rapdev.sophos.health\_check.policy.server.server\_threat\_protection.total**(gauge)                | Number of total servers under threat protection checks                                    |
| **rapdev.sophos.health\_check.exclusions.policy.computer.score**(gauge)                              | Score out of 100 for computers passing exclusion checks                                   |
| **rapdev.sophos.health\_check.exclusions.policy.computer.total**(gauge)                              | Number of total computers under exclusion checks                                          |
| **rapdev.sophos.health\_check.exclusions.policy.computer.number\_of\_security\_risks**(gauge)        | Number of computers' security risks found in exclusion checks                             |
| **rapdev.sophos.health\_check.exclusions.policy.server.score**(gauge)                                | Score out of 100 of servers passing exclusion checks                                      |
| **rapdev.sophos.health\_check.exclusions.policy.server.total**(gauge)                                | Number of total servers under exclusion checks                                            |
| **rapdev.sophos.health\_check.exclusions.policy.server.number\_of\_security\_risks**(gauge)          | Number of servers' security risks found in exclusion checks                               |
| **rapdev.sophos.health\_check.exclusions.global.score**(gauge)                                       | Score out of 100 for global exclusion checks                                              |
| **rapdev.sophos.health\_check.exclusions.global.number\_of\_security\_risks**(gauge)                 | Number of global security risk exclusions                                                 |
| **rapdev.sophos.health\_check.protection.computer.not\_fully\_protected**(gauge)                     | Number of computers not fully protected                                                   |
| **rapdev.sophos.health\_check.protection.computer.score**(gauge)                                     | Score out of 100 of computers passing protection checks                                   |
| **rapdev.sophos.health\_check.protection.computer.total**(gauge)                                     | Number of total computers under protection checks                                         |
| **rapdev.sophos.health\_check.protection.server.not\_fully\_protected**(gauge)                       | Number of servers not fully protected                                                     |
| **rapdev.sophos.health\_check.protection.server.score**(gauge)                                       | Score out of 100 of servers passing protection checks                                     |
| **rapdev.sophos.health\_check.protection.server.total**(gauge)                                       | Number of total servers under protection checks                                           |
| **rapdev.sophos.health\_check.tamper\_protection.server.score**(gauge)                               | Score out of 100 of servers passing tamper protection checks                              |
| **rapdev.sophos.health\_check.tamper\_protection.server.total**(gauge)                               | Number of total servers under tamper protection checks                                    |

### Service Checks{% #service-checks %}

**rapdev.sophos.can\_connect**

Returns `OK` if the agent can connect to Sophos API, `CRITICAL` if it can't.

*Statuses: ok, critical*

**rapdev.sophos.endpoint.overall\_health**

Returns `OK` if the endpoint is in good health, `WARNING` if it is in suspicious health, `CRITICAL` if it is in bad health, and `UNKNOWN` if health is not found

*Statuses: ok, critical, warning, unknown*

**rapdev.sophos.endpoint.service\_running**

Returns `OK` if the service is running, `CRITICAL` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.firewall.connected**

Returns `OK` if the Firewall is connected, `CRITICAL` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.firewall.suspended**

Returns `CRITICAL` if the Firewall is suspended, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.policy.computer.threat\_protection.snoozed**

Returns `CRITICAL` if the policy is snoozed, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.policy.server.server\_threat\_protection.snoozed**

Returns `CRITICAL` if the policy is snoozed, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.exclusions.policy.computer.snoozed**

Returns `CRITICAL` if the policy is snoozed, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.exclusions.policy.server.snoozed**

Returns `CRITICAL` if the policy is snoozed, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.exclusions.global.locked\_by\_managing\_account**

Returns `CRITICAL` if the settings are managed by a partner or organization, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.exclusions.global.snoozed**

Returns `CRITICAL` if the settings are managed by a partner or organization, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.protection.computer.snoozed**

Returns `CRITICAL` if Protection check is snoozed, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.protection.server.snoozed**

Returns `CRITICAL` if Protection check is snoozed, `OK` if it is not.

*Statuses: ok, critical*

**rapdev.sophos.health\_check.tamper\_protection.server.snoozed**

Returns `CRITICAL` if Tamper Protection check is snoozed, `OK` if it is not.

*Statuses: ok, critical*

## Support{% #support %}

For support or feature requests, contact RapDev.io through the following channels:

- Support: [support@rapdev.io](mailto:support@rapdev.io)
- Sales: [sales@rapdev.io](mailto:sales@rapdev.io)
- Chat: [rapdev.io](https://www.rapdev.io/#Get-in-touch)
- Phone: 855-857-0222

This application is made available through the Marketplace and is supported by a Datadog Technology Partner. Click Here to purchase this application.
