Data Protection
Suggest, discuss, and vote on new ideas for Sophos Data Protection products. Protecting your data, wherever it goes.
-
Support for Central Device Encryption on Server platforms
Manage BitLocker on Server platforms and also support a cost-effective decommissioning process of drives.
43 votesThanks for the feedback. This is something we are considering for future versions.
-
SGN File Encryption: Generate Keys with Passphrase in Management Center
To generate Keys with passphrase it is necessary to create them on a client an sync them into the management before using them in a policy.
It would be easier and ore intuitive for admins to create them with passphrase in the management center.6 votes -
Support for BitLocker To Go
Manage full disk encryption on removable media by introducing a new policy setting for BitLocker To Go.
28 votes -
Hitman pro red alert ideas
hi Sophos here some ideas for hitman pro red alert
1.make to protect all remote ports
2.i hear that Russia hakers whant to infect routers with malware to attacks diferent locations , I read I on a website
I whant you to make a profecional anti exploit shild for modem and raouter so all type of attack will be block by hitman pro red alert and protect your modem or raouter again any attack or exploit your modem or raouter have
3.make protection scrips website attacks there are a lot of website that cotain scrips infection attacks that open automatic…4 votes -
MAC Binding in PPTP VPN
I have configured PPTP vpn in Sophos but PPTP vpn is not secured other than SSL VPN but SSL VPN Works very Slow. So my concern is i want to MAC Binding in PPTP VPN.
Lets Suppose i have configured the PPTP VPN in User's machine and he knows the Username and Password of the VPN. he can share to some one and access the network outside from the office so it can be data threat in PPTP VPN. So i request please do something about this security.1 vote -
Grandular Monitoring of Dropbox
I need to be able to monitor what files are being uploaded into dropbox.
This would just need to be the same type of log files you get from files being moved to a USB drive. The file path and name.
1 vote -
email for dlp viloations
For each DLP policy I would like the ability to configure who to send emails for policy alerts. Right now all alerts go to the Super Admins who often times are not the people responsible for following up on the DLP alerts
1 vote -
Sophos Central Disk Encryption: Need to be able to decrypt a drive from Central Management
Sophos Central Disk Encryption: Need to be able to decrypt a drive from Central Management
- It would be really convenient. It could be done as a popup/checkbox choice if we are removing the encryption software from an endpoint (or multiple endpoints with a a set of confirmation steps for decrypting).
In an MSP environment, MSP customers often leave and MSPs want the ability to put things back into a state where they were before they got there. Another reason to add this feature .
5 votes -
Central to support Bitlocker to go
There is an old entry for this but no new updates / comments. When will we likely see this so that customers can truly go Cloud and not rely on Safeguard for this function. Thanks
1 voteThanks for the feedback. We do not have any immediate plans to add support for BitLocker to Go.
-
Allow Mass Verification of Key Presence in SGN Database
There should be a process, field, alert, literally ANYTHING that allows us to check, en masse, the presence of a valid recovery key. The only way to make sure that a valid key exists is to check the machines manually.
We have had issues with Surfaces, where the key becomes corrupted or lost or something, and we don't realize there is a problem until we have to actually do a recovery.
Other products have an alert or something that says when a client is in a state that isn't optimal. SGN does not. It should be easy to query the…
14 votes -
Sophos Central - Manage Endpoint Software: Add ability to remove any/all Sophos software from a computer from the Central Management Console
Sophos Central - Manage Endpoint Software: Add ability to remove any/all Sophos software from a computer from the Central Management Console.
This should include just Central Encryption Components as well.
Many MSPs want the ability to remove their management for their customers and this would include all traces or a managed software solution. This is a very common request among MSPs and their automation facilities and tools that they use to manage and deploy software to customer computers.
3 votes -
Sophos is coded to filter out nFront Password Filter provider. Can Sophos allow nFront provider to pass through? email to PLAY@XFCU.ORG
Sophos is coded to filter out nFront Password Filter provider. Can Sophos allow nFront provider to pass through so nFront password filter will work? email to PLAY@XFCU.ORG
1 vote -
Enable User Switching?
Didn't catch this lack of support of a basic Windows feature until launching our wide rollout to the hospital PCs. Disabling U.S. might be fine in enterprise large office environments where a cube-dweller uses their dedicated PC for an 8 hour shift. But your product strangles a feature that's ingrained in smaller medical / industrial / retail PC usage. Without U.S. ability, using SafeGuard means a nurse has to close their apps (usually an EMR, Radiology, Lab reports web-view, security system monitor, etc.) and log out completely every time she has to leave the station to bring a new mother…
46 votes -
windows 10 poa
Implement Windows 10 POA with Smartcards like in Windows 7. Only the BitLocker PIN is not Enterprise ready in my humble opinion..
54 votes -
Define Password Complexity from Central
Please add some more Bitlocker configuration possibilities, like the option to configure the password complexity, as described here:
http://windowsitpro.com/security/q-how-can-i-set-password-complexity-removable-bitlocker-protected-devices36 votesThis is on the backlog for a future release.
We can’t control the GPO settings for the password complexity which means that if the Admin overrides password rules via central GPO settings then we can’t enforce the Central Device Encryption password rules on the endpoint. However, if there are no password rules defined via GPO, the Central Device Encryption password rules will apply. -
Reflexion - Notify domain owner when email address placed on BadMail list
Recently, one of my outgoing email addresses was placed on your Badmail list. I didn't know for two days so I had two days of email that was supposed to go to my customers that failed and won't be retried. Being notified that it was placed on the Badmail list would be much appreciated!
3 votes -
Allow delegation of exporting Bitlocker recovery keys
Exporting Bitlocker recovery keys is currently being restricted to Master Security Officers only. This is insufficient for daily business in large organizations. MSO role should be restricted to very small group of people. If this small group of people is unavailable, then nobody is able to recover a Bitlocker client. For this reason the feature of exporting Bitlocker recovery keys should be delegable to "normal" Security Officers.
Alternately there should be an option to export recovery keys by a script.
4 votes -
Update Port Auditor
The Port Auditor 3.4 is out of date. Please Update to support current OS
1 vote -
Azure database support
Please support Azure-hosted MS-SQL databases in Safeguard. It is one of the only products in our shop that still requires us to spin up a full MS-SQL server in order to host it.
4 votes -
Official support for VMWare Horizon (former VMWare VDI)
Customer switch its desktop environment to VDI environment. They need official support for this VDI platform.
16 votes
- Don't see your idea?
