The cloud web gateway needs to have an import function for block/allow lists of sites. Migrating to this platform is difficult when you have to manually enter every single blocekd or allowed site that you are migrating from another platform.

Hello Team,

We have the partner here requesting to have the helpdesk role in web appliance to manually synchronize the AD. This will allow the customer to no need to call the partner just to request to manually synchronize the AD if there are changes done on AD. For your assistance please. Thank You.

Hello Team,

We have customer here requesting to to have option to change the interval for the default synch time of AD to Web appliance. Customer advise that they need to have shortened AD synch interval as when they do changes on AD, it takes time for the synchronization to take effect. Partner is aware that he can do the manual synchronization but he said that customer needs to contact him just to do the manual synchronization. For your assistance please. Thank You

Email Appliance - Modify/Delete Header "Received from" showing local hostname and its local IP
sample header:
Received: from (local hostname) (unknown [local IP]) by mail.customer.domain (Sophos Email Appliance) with ESMTP id DDBB55220751_D330E57F for <external email eg. gmail>; Sat, 20 Jul 2019 12:51:35 +0000 (GMT)

Email Gateway Encryption needs some enhancements.
1. Option to disable multiple languages when users receive encrypted emails.
2. Sophos uses Echoworx for encryption but doesn't utilize the web portal. Giving the ability to use the web portal for recipients to send back a message encrypted would be great and it will be secure.

The "Blocked Sites" report indicates HTTP errors as a "block" in the report. Certain server codes like 500 Internal Server Error, should not be included on the report or shown as an "error" rather than a "block" event. This falsely leads you to believe policy is actively blocking the URL.

Need to have the ability to for time of click block list. They have the ability to allow time of click websites. No idea why there is not the option to block time of click sites that we know are bad.

Need to have the ability to for time of click block list. They have the ability to allow time of click websites. No idea why there is not the option to block time of click sites that we know are bad.

Need to have the ability to for time of click block list. They have the ability to allow time of click websites. No idea why there is not the option to block time of click sites that we know are bad.

It would be useful to highlight banners with a choice of colours for background and text to catch a users attention.

Hello Team,

We have a customer requesting to have schedule automatic update for each cluster on email appliance. For your assistance please. Thank You.

Hello,

Please allow White-listing\Blacklisting of Email by Subject Line and\or Keyword.

Our HR gets emails from personal emails address all of the time for users replying to job postings. As these emails come from their personal email address @aol.com @gmail.com it in not feasible to white-list all these personal address. All the address however have "application" in the subject line. If we were able to white list emails with "application" keyword in the subject this would greatly increase our HR departments ability to get and analyze these emails instead of having to release them from quarantine every day.

Hello Team,

We have customer here requesting to have option on web interface of web appliance to retrieve traffic logs from the shell or back end of web appliance. For your assistance please
Thank You.

Today, Sophos Web Appliance records HTTP URLs, caller (using LDAP) and timestamp.

I'd like to request that it should also record HTTP headers.

We are existing clients who'd like to audit HTTP calls and we need the headers to be included.

On the web appliance, it would be nice if you could mass select your scheduled reports and "run now" or "run again". We hit a snag where the mail server wasn't available during the 1st of the month reporting and previewing, then saving, then manually emailing...

A, added bonus would be to add a change of criteria like a new date range.

When Sophos email an alert to the Sophos admins have Sophos automatically create a JIRA ticket with the information from the Sophos alert then the service desk will get that ticket immediately and be able to investigate.

We use AD Sync over multiple domains. Currently we can only see the AD username but cannot see which domain this belongs to. This makes it difficult to report on individual domains, and impossible to tell which user is which when the same name is used on more than 1 domain.
Ideally the username would be shown as: domain\username

The "search" log only goes as far back as 30 days. There should be an option to allow admins to set it for more than 30 days (60, 90, 120, etc.)

I'd like the ability to drill down into the bar graphs to see user name and messages which are being reported on.