Data Protection
Suggest, discuss, and vote on new ideas for Sophos Data Protection products. Protecting your data, wherever it goes.
-
DLP Alerts show full File Destination Path.
In DLP Alerts, is it possible to include the full path to where the file was being Moved/Copied?
1 vote -
Filestream Google
Although Google Drive Encryption files is supported by Sophos, FileStream it is not. It would liberate resources from computer as it is not mandatory to have files downloaded. As Safe Guard 8.1 encrypts files in local it doesn't work with this cloud resource.
Dropbox has a similar resource.13 votes -
DFS FQDN Path support
Please add the Filterdriver Support for Domain-DFS Namespaces with FQDN Access in the Windows Explorer in SGN 8.10, in 8.00.5 it already works.
If the user access the share with FQDN, it is able to DECRYPT the data in 8.10, because the Filterdriver obviously does not interpret FQDN-Paths.
In 8.00.5 it was possible to define FQDN Paths both in SGMC and in the Windows Explorer on Client Side.Example:
\\domain.fqdn\dfs\share --> Does not work in SGN 8.10
\\domain\dfs\share --> works in SGN 8.103 votes -
Gold Image Deployment
Support deployment via a 'Gold Image' for use within a Citrix XenDesktop persistent or non-persistent desktop environment. Similar to the methods used with other Sophos products such as EndPoint - https://community.sophos.com/kb/en-us/120560
5 votes -
unclassified
How can i identify unclassified data used
1 vote -
Complete AD sync for safeguard management center
In the SafeGuard management center you allow for AD sync, but that sync does not resolve itself when password changes are made. Currently the only solution is to demote and re-promote manually each security officer. If the AD sync could function as a task properly and sync the password changes in an almost LDAP type situation, that would be optimal.
2 votes -
Dynamic ip should be stop to release for device, when blocked the mac for same device by lan to wan rejected rules
Dynamic ip should be stop to release for device, when blocked the mac for same device by lan to wan rejected rules
1 vote -
virtualbox
Please add back support for cliënt installations on Virtualization platforms, as of now customers with a Virtual Desktop Infrastructure are unable to use Safeguard v8.1, ESX(i) and Hyper-V are not supported. I use Virtualbox to test set-ups and give demonstrations.
https://community.sophos.com/kb/en-us/132189
Virtualization platform support.
The SafeGuard Client only supports VMware Workstation and Player as virtualization platform. All other platforms like VMware ESX/ESXi Server, Microsoft Virtual PC, Microsoft Hyper-V are not supported. VirtualBox is incompatible with SafeGuard 8.1 and might cause BSODs (IRQL_NOT_LESS_OR_EQUAL).6 votes -
revoke
The Automatic Revoke BITLOCKER Key feature of Sophos needs to be a configurable setting
at the enterprise and estate levels or via the Encryption Policy. Automatically revoking a valid key requires that the PC be off-line for the "former" valid key to be used. If the PC is on-line and the key is read, that key immediately become invalid - even if the PC is shutdown shortly. We need to be able to read a key and use it. We need the option to revoke or not. I recommend a read option and a revoke option.Our Sophos Managers are…
1 vote -
Support for BitLocker To Go
Manage full disk encryption on removable media by introducing a new policy setting for BitLocker To Go.
22 votes -
Remotely trigger a PIN reset from the Central Dashboard for machines using encryption.
Having the ability to force a user to change their PIN via a request from the Central dashboard would be useful. We've gotten a number of requests for the ability to do this from sysadmins.
31 votes -
Define Password Complexity from Central
Please add some more Bitlocker configuration possibilities, like the option to configure the password complexity, as described here:
http://windowsitpro.com/security/q-how-can-i-set-password-complexity-removable-bitlocker-protected-devices35 votesThis is on the backlog for a future release.
We can’t control the GPO settings for the password complexity which means that if the Admin overrides password rules via central GPO settings then we can’t enforce the Central Device Encryption password rules on the endpoint. However, if there are no password rules defined via GPO, the Central Device Encryption password rules will apply. -
Enable User Switching?
Didn't catch this lack of support of a basic Windows feature until launching our wide rollout to the hospital PCs. Disabling U.S. might be fine in enterprise large office environments where a cube-dweller uses their dedicated PC for an 8 hour shift. But your product strangles a feature that's ingrained in smaller medical / industrial / retail PC usage. Without U.S. ability, using SafeGuard means a nurse has to close their apps (usually an EMR, Radiology, Lab reports web-view, security system monitor, etc.) and log out completely every time she has to leave the station to bring a new mother…
32 votes -
Official support for VMWare Horizon (former VMWare VDI)
Customer switch its desktop environment to VDI environment. They need official support for this VDI platform.
14 votes -
Please add YubiKey to the supported smartcards
Could you please add YubiKeys to your supported smartcards as it's a convient smartcard with multiple use cases. e.g. certificate based user authentication, otp functionality, code signing
34 votes -
Windows Lockscreen Configuration
At the moment it is not possible to configure the windows 10 locksreen if Safeguad is installed.
Please make it possible to let the admin choose if it is possible or not.
Best would be to configure it via Windos GPO. To configure it via Safeguard policy would be an alternative way.20 votes -
Filestream Google
Although Google Drive Encryption files is supported by Sophos, FileStream it is not. It would liberate resources from computer as it is not mandatory to have files downloaded. As Safe Guard 8.1 encrypts files in local it doesn't work with this cloud resource.
Dropbox has a similar resource.23 votes -
Safeguard HTML Wrapper Branding
Add the ability to brand the HTML wrapper file when using the option to 'create password protected file'.
At least being able to add/change a company logo to replace the default Sophos logo maybe with 'powered by Sophos Safeguard' or similar. This would give recipients more 'confidence' that the attached HTML file was genuinely from the user at their company and the attachment hasn't been 'compromised'.
1 vote -
encrypt zip file
Sophos DLP can not block .zip files with password.
Blocking works only for passwords placed directly on files, such as .xls or .doc, but if the file is without a password and the password is put into compression, the tool can not recognize and lock the file.
With this it is possible to leak information, causing a large breach in data security.2 votes -
Ability to setup reports in the GUI of Safeguard Enterprise
As far as I've researched there isn't any way of producing reports on Safeguard Enterprise and the client computers outside of using the SQL Management Studio with SQL scripts. Especially if the encryption had failed on a laptop or finding out about suspicious activity with a user having multiple failed logons, I feel having no ability to automatically find out this information can feel like a problem on a security end.
Therefore, I would like to suggest the ability to set up some granular reporting on the GUI side for reporting events of interest and also setup email on a…
1 vote
- Don't see your idea?
