Sophos PureMessage

The Sophos PureMessage DSM for IBM QRadar accepts events by using Java™ Database Connectivity (JDBC).

QRadar records all relevant quarantined email events. This document provides information about configuring QRadar to access the Sophos PureMessage database by using the JDBC protocol.

QRadar supports the following Sophos PureMessage versions:

• Sophos PureMessage for Microsoft Exchange - Stores events in a Microsoft SQL Server database that is specified as savexquar.
• Sophos PureMessage for Linux® - Stores events in a PostgreSQL database that is specified as pmx_quarantine.

Here's information on integrating QRadar with Sophos:

• Integrating QRadar with Sophos PureMessage for Microsoft Exchange
• Integrating QRadar with Sophos PureMessage for Linux