For each DLP policy I would like the ability to configure who to send emails for policy alerts. Right now all alerts go to the Super Admins who often times are not the people responsible for following up on the DLP alerts

Sophos Central Disk Encryption: Need to be able to decrypt a drive from Central Management

1. It would be really convenient. It could be done as a popup/checkbox choice if we are removing the encryption software from an endpoint (or multiple endpoints with a a set of confirmation steps for decrypting).

In an MSP environment, MSP customers often leave and MSPs want the ability to put things back into a state where they were before they got there. Another reason to add this feature .

There is an old entry for this but no new updates / comments. When will we likely see this so that customers can truly go Cloud and not rely on Safeguard for this function. Thanks

Sophos Central - Manage Endpoint Software: Add ability to remove any/all Sophos software from a computer from the Central Management Console.

This should include just Central Encryption Components as well.

Many MSPs want the ability to remove their management for their customers and this would include all traces or a managed software solution. This is a very common request among MSPs and their automation facilities and tools that they use to manage and deploy software to customer computers.

Sophos is coded to filter out nFront Password Filter provider. Can Sophos allow nFront provider to pass through so nFront password filter will work? email to PLAY@XFCU.ORG

Implement Windows 10 POA with Smartcards like in Windows 7. Only the BitLocker PIN is not Enterprise ready in my humble opinion..

Please add some more Bitlocker configuration possibilities, like the option to configure the password complexity, as described here:
http://windowsitpro.com/security/q-how-can-i-set-password-complexity-removable-bitlocker-protected-devices

Recently, one of my outgoing email addresses was placed on your Badmail list. I didn't know for two days so I had two days of email that was supposed to go to my customers that failed and won't be retried. Being notified that it was placed on the Badmail list would be much appreciated!

Exporting Bitlocker recovery keys is currently being restricted to Master Security Officers only. This is insufficient for daily business in large organizations. MSO role should be restricted to very small group of people. If this small group of people is unavailable, then nobody is able to recover a Bitlocker client. For this reason the feature of exporting Bitlocker recovery keys should be delegable to "normal" Security Officers.

Alternately there should be an option to export recovery keys by a script.

Please support Azure-hosted MS-SQL databases in Safeguard. It is one of the only products in our shop that still requires us to spin up a full MS-SQL server in order to host it.

Customer switch its desktop environment to VDI environment. They need official support for this VDI platform.

SGLC Client should support XenApp 7.15 terminal services on Windows Server 2016

On-premise SafeGuard Enterprise customers have been requesting the ability to remotely trigger a PIN reset for specific machines.

A context menu item via right-clicking a Machine Object in the Management Center triggering a PIN reset the next time the SafeGuard client syncs would be the best implementation for this feature.

Could you please add YubiKeys to your supported smartcards as it's a convient smartcard with multiple use cases. e.g. certificate based user authentication, otp functionality, code signing

Make available a simple, free utility for Mac users to decrypt SafeGuard files created on a Windows system. If such a utility exists, inform the Sophos chat agents.

Rather than have to set up a Windows VM for the express purpose of decrypting files, it would be awfully nice if there was a handy macOS utility one could use in place of the SGPortable.exe file that accompanies the media encrypted with the Windows SafeGuard products.

Ability to have Network Aware POA on machines (especially BitLocker as there is no user-based POA).

Many customers need the ability to disable POA on devices in the office - for example shared machines. If the device is stolen, then POA should be enabled immediately. We are currently working on a 3,000 user company with Call Centre who love what we can do in Win7 but need a comparable approach for BitLocker managed machines.

This would apply for Central as well however we have a larger SGN deployment base today so SGN is the most important starting place.

The Message to enter the old password (usually after resetting the PW by an AD-Admin) often confuses users and admins. The procedure is completly described in KBA 112239, but has to be delivered by the support.

The message could be improved by directly mentioning or referring to KBA 112239. This could help admins and users to find the solution without calling any support