Data Protection
Suggest, discuss, and vote on new ideas for Sophos Data Protection products. Protecting your data, wherever it goes.
-
safeguard outlook 64 bit
Safeguard Outlook 64 bit is not supported - please get this supported.
48 votes -
Turn on SGMTrace-Logging via button
The SGMTrace-Logging could be "acitivated" and "deactivated" (= changing Minimumtracelevel from 5a to 0 and back) via buttons in the about-box of SGN.
12 votes -
Allow SafeGuard Management Center to reset/bypass a locked device
We do not use POA, and are unable to use the Sophos credential provider due to incompatibility with other applications. We use the secondary SafeGuard login, which occurs after logging in with the Windows Credential provider. Currently the only way to reset a locked device is to log in using the credential provider. There should be an option in the Management Center to reset the locked state, or some other option other than having to re-enable the Sophos credential provider, use it once, and disable it again (which can be time consuming if managed through GPOs, because it requires multiple…
3 votes -
Webhelpdesk new recover type "Bitlocker recovery key ID"
It is a SGN MC recovery feature and should also be available via Webhelpdesk.
3 votes -
Microsoft Edge
Support Microsoft Edge as a Browser Destination for DLP. This is the default browser for Windows 10, and it cannot be removed.
The browser destination features of DLP are severely limited without this.
31 votes -
Allow Wildcards in Ignored applications (General Settings->File Encryption)
Allow wildcards in Ignored applications, instead of having to enter the literal path for excluded applications. In our case we have to include java for preformance reasons, and there are dozens of versions, with new versions being added regurarly, wich requires inervention for every new version. Allowing wildcards would make life allot easyer.
3 votes -
Improve compatibility of Outlook Plug-in and location based file encryption
When the plug-in is enabled in SafeGuard, Outlook is excluded from the encryption/decryption processes. This does not work well with location based file encryption as an item opened by Outlook that is encrypted is unreadable. This behavior can be triggered a few ways:
1) Items saved by Outlook are then modified by a different program.
2) Items saved by Outlook are moved into or within a location defined in scope of encryption policies.
3) Items saved by other programs are opened by Outlook.
4) A data compliance requirement to encrypt all files regardless of type (no compliance group would say,…2 votes -
DFS FQDN Path support
Please add the Filterdriver Support for Domain-DFS Namespaces with FQDN Access in the Windows Explorer in SGN 8.10, in 8.00.5 it already works.
If the user access the share with FQDN, it is able to DECRYPT the data in 8.10, because the Filterdriver obviously does not interpret FQDN-Paths.
In 8.00.5 it was possible to define FQDN Paths both in SGMC and in the Windows Explorer on Client Side.Example:
\\domain.fqdn\dfs\share --> Does not work in SGN 8.10
\\domain\dfs\share --> works in SGN 8.104 votes -
Safeguard Enterprise Server "System Locale" Problem
When any user installs server operating system with a System Locale of Turkey on Windows OS Install first screen, Active Directory Synchronization on SGN Console not working properly.
For example of an ad domain venividivici.intra,
On first install - SGN Console Syncs the domain with a name of VENİVİDİVİCİ.İNTRA with upper case letter of "i" and none of windows services knows that letter on ad, sql etc.
After we change System Locale from Control Panel to United Kingdom - SGN cannot ever sync with any ad domain
After reinstallation of Server OS with a System Locale of United Kingdom, then…1 vote -
Source Path
Under our old Sophos system, the source path would show on the Data Loss Prevention Report. We switched to Sophos Central and now I am being told that option is no longer available. The source path is very useful to have on the report and Executive Management used it frequently. We need to have the option to add the source path to the report.
1 vote -
Report for FileBase Encryption
Wish the report function in SGN server can retrieved the total amount (how many of them) and the details of the folders/files (what folder/file names) under each filebase encryption policy. It will be good for reporting and presentable to clients.
1 vote -
Gold Image Deployment
Support deployment via a 'Gold Image' for use within a Citrix XenDesktop persistent or non-persistent desktop environment. Similar to the methods used with other Sophos products such as EndPoint - https://community.sophos.com/kb/en-us/120560
6 votes -
DLP Alerts show full File Destination Path.
In DLP Alerts, is it possible to include the full path to where the file was being Moved/Copied?
1 vote -
Filestream Google
Although Google Drive Encryption files is supported by Sophos, FileStream it is not. It would liberate resources from computer as it is not mandatory to have files downloaded. As Safe Guard 8.1 encrypts files in local it doesn't work with this cloud resource.
Dropbox has a similar resource.13 votes -
unclassified
How can i identify unclassified data used
1 vote -
virtualbox
Please add back support for cliënt installations on Virtualization platforms, as of now customers with a Virtual Desktop Infrastructure are unable to use Safeguard v8.1, ESX(i) and Hyper-V are not supported. I use Virtualbox to test set-ups and give demonstrations.
https://community.sophos.com/kb/en-us/132189
Virtualization platform support.
The SafeGuard Client only supports VMware Workstation and Player as virtualization platform. All other platforms like VMware ESX/ESXi Server, Microsoft Virtual PC, Microsoft Hyper-V are not supported. VirtualBox is incompatible with SafeGuard 8.1 and might cause BSODs (IRQL_NOT_LESS_OR_EQUAL).7 votes -
Complete AD sync for safeguard management center
In the SafeGuard management center you allow for AD sync, but that sync does not resolve itself when password changes are made. Currently the only solution is to demote and re-promote manually each security officer. If the AD sync could function as a task properly and sync the password changes in an almost LDAP type situation, that would be optimal.
2 votes -
Dynamic ip should be stop to release for device, when blocked the mac for same device by lan to wan rejected rules
Dynamic ip should be stop to release for device, when blocked the mac for same device by lan to wan rejected rules
1 vote -
revoke
The Automatic Revoke BITLOCKER Key feature of Sophos needs to be a configurable setting
at the enterprise and estate levels or via the Encryption Policy. Automatically revoking a valid key requires that the PC be off-line for the "former" valid key to be used. If the PC is on-line and the key is read, that key immediately become invalid - even if the PC is shutdown shortly. We need to be able to read a key and use it. We need the option to revoke or not. I recommend a read option and a revoke option.Our Sophos Managers are…
1 vote -
Safeguard HTML Wrapper Branding
Add the ability to brand the HTML wrapper file when using the option to 'create password protected file'.
At least being able to add/change a company logo to replace the default Sophos logo maybe with 'powered by Sophos Safeguard' or similar. This would give recipients more 'confidence' that the attached HTML file was genuinely from the user at their company and the attachment hasn't been 'compromised'.
1 vote
- Don't see your idea?
