Yesterday I needed some rules to check Sophos Virus scanner on our corporate network.
So I made an first version to monitor Sophos Version 4.x
You can Import it into MOM and it will automatic find the sophos enabled servers. See also the Alert and event view. In this version I have only enabled the most critical event rules.
You are free to change it , please inform me also when what you have changed. So we can come to a next version.
Have fun with it!