In Sophos Central, we would like to see filtering options for email alerts.

For example, we would like to keep email alerts ONLY for Malware threats.

Right now we're receiving too many alerts everyday, most of them unnecessary.

Be identify as a FW/UTM vendors with editors like Tufin, Algosec and Firemon,
to get a connector pre-configure in their tools.
Really usefull for heterogeneous environment or MSP customers.

Enable alerts to be sent to an email address. Although Sophos Anti Virus quarantines well sometimes the machine does not recover entirely from an attack. The last attack I dealt with was seen off but many parts of the OS needed attention to recover fully

I would like to have feature like to delete the activity logs, not sure how long it is available or it is eating CPU, in that case we must have feature unnecessary log files which we can see in the Management.

Request to propagate changes in the Outgoing SMTP mail server in the management appliance to the web appliances that are joined.

Had performance issues the other day. Turned out to be an interface operating in a degraded state. Only discovered by accident in the cli. Seems to be a serious design oversite not to include the operational state of the int on the gui.

Provide the option to add the email message ID as a variable that can be added to a notification/header when it has been quarantined, this would make it easier for an admin to find and release an email that has been quarantined and needs releasing.
Alternatively provide a unique ID that can be added to the notification and searched with to release any quarantined emails.

Get High and Mediun Alerts raised as tickets in our internal helpdesk system automatically rather than just altered via email

Under Management->Licensing->Active IP Addresses->IP addresses in scope of license

add the Name next to the IP Address if a (Host) Network Definition exists for the IP address. NOTE: Please do not use the Hostname field as it can be automatically populated. The user defined Name field should be more helpful to admins.

As it is, I found I had to create an extra VLAN for WAP deployment and then bridge my two planned SSIDs to two tagged VLANs.

I often find when I schedule a UTM to update its firmware, that I'm having to bounce back to the dashboard to ensure that the time/date of the UTM is correct, I never take this for granted. So my idea is to simply put the system date/time at least on the Up2Date screen, if not just at the top of the screen in general.

SUM allows for the configuration of firewall policies and rule set however it does not allow for the configuration and deployment of country blocking rules. Currently, you must configure country blocking by individual UTM.

Add an audit log in the web appliance

If a local location is entered in the "source folder" field in Sophos Deployment Packager, it should recognize this fact and skip making an extra copy of the files. By "local location" I mean if the path starts with a drive letter as well as a UNC path that starts with the name of the local machine.

Many MSPs use N-able for monitoring and management. Add integration to allow UTMs and SUM to have status and alerts visible in N-able

In particular, I am very interested in allow a particular user to manipulate the web filtering rules but without giving that user access to any other part of the firewall's configuration.

Allow Network Groups to be used for both the User Portal and Remote Access VPN at the below locations. This need is due to having more than one circuit. When we have more than one circuit, we want to be able to allow 1 Public IP on each circuit to listen, however due to the current design, this is not possible.

User Portal->Advanced tab->Network Settings
Remote Access->SSL->Settings tab->Interface address

Thank you,
Travis Grenell
Systems & Network Engineer III
Cisco, Microsoft, HP & Sophos UTM Architect Certified
Sophos Gold Partner
Snap Technology

Allow web category overrides and tags to be centrally configured and pushed out via Sophos UTM Manager

Like SUM, can be useful create a local server it can deploy to local client a summary of patch packet obtained from the main server (like SUM)

In the End User Portal I'm able to specify allowed users/ groups.

Therefor I'm able to define a group based on a Active Directory group, limited to backend group membership.

Now the limitation:
The User Portal only accepts AD Groups which are directy related to AD-Users. The use of nested AD groups (Users --> AD-Group1 --> AD-Group2) are accepted by User Portal, but without any action.

A needful enhancement would be the functionality of nested AD Groups, using in User Portal