Data Protection
Suggest, discuss, and vote on new ideas for Sophos Data Protection products. Protecting your data, wherever it goes.
-
Improve compatibility of Outlook Plug-in and location based file encryption
When the plug-in is enabled in SafeGuard, Outlook is excluded from the encryption/decryption processes. This does not work well with location based file encryption as an item opened by Outlook that is encrypted is unreadable. This behavior can be triggered a few ways:
1) Items saved by Outlook are then modified by a different program.
2) Items saved by Outlook are moved into or within a location defined in scope of encryption policies.
3) Items saved by other programs are opened by Outlook.
4) A data compliance requirement to encrypt all files regardless of type (no compliance group would say,…2 votes -
DFS FQDN Path support
Please add the Filterdriver Support for Domain-DFS Namespaces with FQDN Access in the Windows Explorer in SGN 8.10, in 8.00.5 it already works.
If the user access the share with FQDN, it is able to DECRYPT the data in 8.10, because the Filterdriver obviously does not interpret FQDN-Paths.
In 8.00.5 it was possible to define FQDN Paths both in SGMC and in the Windows Explorer on Client Side.Example:
\\domain.fqdn\dfs\share --> Does not work in SGN 8.10
\\domain\dfs\share --> works in SGN 8.104 votes -
Safeguard Enterprise Server "System Locale" Problem
When any user installs server operating system with a System Locale of Turkey on Windows OS Install first screen, Active Directory Synchronization on SGN Console not working properly.
For example of an ad domain venividivici.intra,
On first install - SGN Console Syncs the domain with a name of VENİVİDİVİCİ.İNTRA with upper case letter of "i" and none of windows services knows that letter on ad, sql etc.
After we change System Locale from Control Panel to United Kingdom - SGN cannot ever sync with any ad domain
After reinstallation of Server OS with a System Locale of United Kingdom, then…1 vote -
safeguard outlook 64 bit
Safeguard Outlook 64 bit is not supported - please get this supported.
1 vote -
Source Path
Under our old Sophos system, the source path would show on the Data Loss Prevention Report. We switched to Sophos Central and now I am being told that option is no longer available. The source path is very useful to have on the report and Executive Management used it frequently. We need to have the option to add the source path to the report.
1 vote -
Report for FileBase Encryption
Wish the report function in SGN server can retrieved the total amount (how many of them) and the details of the folders/files (what folder/file names) under each filebase encryption policy. It will be good for reporting and presentable to clients.
1 vote -
DLP Alerts show full File Destination Path.
In DLP Alerts, is it possible to include the full path to where the file was being Moved/Copied?
1 vote -
Filestream Google
Although Google Drive Encryption files is supported by Sophos, FileStream it is not. It would liberate resources from computer as it is not mandatory to have files downloaded. As Safe Guard 8.1 encrypts files in local it doesn't work with this cloud resource.
Dropbox has a similar resource.13 votes -
Gold Image Deployment
Support deployment via a 'Gold Image' for use within a Citrix XenDesktop persistent or non-persistent desktop environment. Similar to the methods used with other Sophos products such as EndPoint - https://community.sophos.com/kb/en-us/120560
5 votes -
unclassified
How can i identify unclassified data used
1 vote -
Complete AD sync for safeguard management center
In the SafeGuard management center you allow for AD sync, but that sync does not resolve itself when password changes are made. Currently the only solution is to demote and re-promote manually each security officer. If the AD sync could function as a task properly and sync the password changes in an almost LDAP type situation, that would be optimal.
2 votes -
Dynamic ip should be stop to release for device, when blocked the mac for same device by lan to wan rejected rules
Dynamic ip should be stop to release for device, when blocked the mac for same device by lan to wan rejected rules
1 vote -
virtualbox
Please add back support for cliënt installations on Virtualization platforms, as of now customers with a Virtual Desktop Infrastructure are unable to use Safeguard v8.1, ESX(i) and Hyper-V are not supported. I use Virtualbox to test set-ups and give demonstrations.
https://community.sophos.com/kb/en-us/132189
Virtualization platform support.
The SafeGuard Client only supports VMware Workstation and Player as virtualization platform. All other platforms like VMware ESX/ESXi Server, Microsoft Virtual PC, Microsoft Hyper-V are not supported. VirtualBox is incompatible with SafeGuard 8.1 and might cause BSODs (IRQL_NOT_LESS_OR_EQUAL).6 votes -
revoke
The Automatic Revoke BITLOCKER Key feature of Sophos needs to be a configurable setting
at the enterprise and estate levels or via the Encryption Policy. Automatically revoking a valid key requires that the PC be off-line for the "former" valid key to be used. If the PC is on-line and the key is read, that key immediately become invalid - even if the PC is shutdown shortly. We need to be able to read a key and use it. We need the option to revoke or not. I recommend a read option and a revoke option.Our Sophos Managers are…
1 vote -
Safeguard HTML Wrapper Branding
Add the ability to brand the HTML wrapper file when using the option to 'create password protected file'.
At least being able to add/change a company logo to replace the default Sophos logo maybe with 'powered by Sophos Safeguard' or similar. This would give recipients more 'confidence' that the attached HTML file was genuinely from the user at their company and the attachment hasn't been 'compromised'.
1 vote -
Ability to setup reports in the GUI of Safeguard Enterprise
As far as I've researched there isn't any way of producing reports on Safeguard Enterprise and the client computers outside of using the SQL Management Studio with SQL scripts. Especially if the encryption had failed on a laptop or finding out about suspicious activity with a user having multiple failed logons, I feel having no ability to automatically find out this information can feel like a problem on a security end.
Therefore, I would like to suggest the ability to set up some granular reporting on the GUI side for reporting events of interest and also setup email on a…
1 vote -
Support for BitLocker To Go
Manage full disk encryption on removable media by introducing a new policy setting for BitLocker To Go.
25 votes -
MAC Binding in PPTP VPN
I have configured PPTP vpn in Sophos but PPTP vpn is not secured other than SSL VPN but SSL VPN Works very Slow. So my concern is i want to MAC Binding in PPTP VPN.
Lets Suppose i have configured the PPTP VPN in User's machine and he knows the Username and Password of the VPN. he can share to some one and access the network outside from the office so it can be data threat in PPTP VPN. So i request please do something about this security.1 vote -
Grandular Monitoring of Dropbox
I need to be able to monitor what files are being uploaded into dropbox.
This would just need to be the same type of log files you get from files being moved to a USB drive. The file path and name.
1 vote -
email for dlp viloations
For each DLP policy I would like the ability to configure who to send emails for policy alerts. Right now all alerts go to the Super Admins who often times are not the people responsible for following up on the DLP alerts
1 vote
- Don't see your idea?
