diff --git a/docs/integration/categories/network_security/sophos_fw.md b/docs/integration/categories/network_security/sophos_fw.md
index 5c9fe544fa..fc61655b03 100644
--- a/docs/integration/categories/network_security/sophos_fw.md
+++ b/docs/integration/categories/network_security/sophos_fw.md
@@ -25,8 +25,14 @@ You can configure a syslog server in Sophos Firewall by following the instructio
 - Enter a name for the syslog server.
 - Enter the IP Address of the syslog server. Messages from the device will be sent to the entered IP address.
 - Enter a Port number that the device will use for communicating with the syslog server. Device will send messages using the selected port.
-- Select the Facility from the available options. Note: Facility informs the syslog server of the log message's source. It is defined by the syslog protocol. You can configure the facility to distinguish log messages from different devices. This parameter helps you identify the device that recorded a specific log file.
+- Select the Facility from the available options, "DEAMON" should work.
+
+!!! Note
+    Facility informs the syslog server of the log message's source. It is defined by the syslog protocol. You can configure the facility to distinguish log messages from different devices. This parameter helps you identify the device that recorded a specific log file.
+
+- Confirm the procotol is UDP.
 - Select the Severity Level from the available options.
+- Deactivate the option "Secure log transmission".
 - Click Save to save the configuration.
 
 ### Forward logs to Sekoia.io