Our organization is using Sophos Mobile to manage password policies on 90+ MacBooks. We want to utilize the Auto-Lock setting, however several users are complaining about the maximum 5 minute setting. I'm confused why 5 minutes is the highest you can go when the options are much longer in the Windows Policy setting, but we would really like to see a 15 or 20 minute option for this option in the MacOS Password Policy Auto-Lock setting.

Thanks, and can you also let me know how long it might take to address one of these suggestions?

Kann man die Benutzerrolle so konfigurieren, dass man nur Zugriff auf eine bestimmte Gerätegruppe gibt?

To help control spam phone calls and vishing to business phone numbers, it would be great to have the ability to push policy-based incoming call filtering (blacklist) from the SMC console and/or allow end-users to implement incoming call filtering as a feature within the SMC client (similar to Sophos Mobile Security).

It would be great to create own reports (by own criteria).
I have an issue to correlate mobile phone numbers with SIM card numbers.
I have 340 iPad in controll and all I need to manually copy and paste to Excel.

When an AD user with a mobile device is deleted, the device is now deleted from the sophos Central without any warning.
This in my opinion is not correct because, for those who manage more than 150 devices, some of which abroad, it is not always possible to withdraw the device physically and / or is not always the same person to manage the process of resignation.
From my point of view, it would be more correct if the device in question were moved to the group of unmanaged devices, so that the anomaly can be detected and managed.

Two factor authentication for the SMC self service portal & admin portal via the Sophos Authenticator application.

Our clients want to see the function of the device movement track. Healthy for the battery life doesn't matter, because typically devices have wired power connection.
Really important - user can't disable geo-tracking.

Within the restrictions settings it would be great to be able to restrict app updates to Wi-Fi only.... at the moment this can't be done meaning my mobile data roaming bills are rather large!

On PC and Macs there should be an option to filter out the alerts so that

The event generated is ->
Event::Endpoint::Smc::RenewInstalledCertificate::2

is disabled. This will prevent being bombarded by alerts about local machine generated by RDP sessions expiring.

#8574980] Sophos Central Admin Support Request has more details.

DEP device enrollment support for Azure AD accounts, for shop which are using Azure AD instead of AD/LDAP for user management, Instead of setting up a user with self service password on Sophos central if it can authenticate with Single sign-on with Azure AD. It can help to streamline device setup. It should be Zero touch for users so that user can sign in with email id and password on DEP device, it should create a user in Sophos central with user email with Single sign on authentication with Azure AD.

If I were to configure Exchange manually on the iPhone, I have the option to synchronize Notes. When I setup the Exchange account within Sophos Central, it only synchronizes Mail, Contacts, Calendars and Reminders. Notes is not shown.

It would be great to have a LED notification when Mail is comming in.
And "New Mail" counter on the App Icon (like new messages on whatsapp icon)

According to Support the "force encryption" setting in the restrictions policy doesn't work with Android releases later than 5.0, due to something Google changed around that time.

Samsung devices have a "Secure Boot" option, which can be manually set.
With all the KNOX integration going on, please give us the option to activate Secure Boot from within Sophos Mobile.

My users are forever complaining about the endless popups that appear on their phones (from Upday, battery saver, etc etc) it would be great to have a setting to turn off all popup notifications - or even better the ability to remove spam apps like upday alltogether!

Please add a policy for android-enterprise in "profil owner mode" to activate bluetooth global in Workspace.
This function exist currently in all device profiles but not in "Profil owner mode".
If you will do something very crazy, you could bluetooth allow only for a app-group! ;-)
Best Regards
Michael Haug

"problem with ssl certificate" - one or more devices cant communicate with the Sophos-Mobile-Server because the server certificate is untrustworthy.

create a report or list the devices wich are not trusted.

In "Edit iOS app" it is possible to set a string for "Version" of an app. That is confusing with the CFBundleShortVersionString of the ipa read from app binary, which is used as "Version" in the devices extended app filter.

Many very important details of an app are currently missing in the "Edit iOS app" view, especially for an enterprise app which was uploaded as a binary:

1.) App version: CFBundleShortVersionString and CFBundleVersion
2.) App signature expiration (when does the app stop working because the certificate used for code signing expired).
pp" by "identifier" and "version" in the devices view. But there it is confusing what version