Endpoint Protection

Suggest, discuss, and vote on new ideas for Sophos Endpoint Protection. Comprehensive security for users and data

Endpoint Protection

Suggest, discuss, and vote on new ideas for Sophos Endpoint Protection. Comprehensive security for users and data

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Removal tool for McAfee SaaS anti virus software

    As instructed by our account manager I'm submitting a support query to request an additional detection be added to the CRT. So that the Sophos installer is able to detect and remove installations of McAfee SaaS anti virus software

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  2. Changing of license type from Advance to standard in portal

    Client mentioned below:

    Client advised that they are using command line method to deploy Sophos Antivirus

    but they didn't found in below KBA for option for Standard and advanced license product option

    and due to that they need to login to each client portal -> go to Licensing -. and then change the license type from Advance to Standard

    and he is looking something automatize through command line as in below KBA

    https://community.sophos.com/kb/en-us/127045

    Advised him, currently there is no option, however he may go as a feature request which go towards the Sophos developing team but unfortunately we don't have…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  3. Export Alerts from the Sophos Central UI

    Please provide the ability to export from the Alerts page in the the Sophos Central UI.

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  4. Prevent loading of Finder Extension in Mac OS

    Sophos installs a Finder Extension in Mac OS, which provides icon overlays amongst other things. This kills the icon overlays in Dropbox Smart Sync and makes that product unusable. It would be helpful (essential for many customers) for the Sophos Cloud console to let us choose not to have this extension (or to have it, but for it not to set icon overlays so that Dropbox becomes useful). We have developed a solution but it's quite a pain to deploy on Sierra, or requires MDM on High Sierra, which many customers will not have.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  5. central alerts

    Sophos Central Alerts can be overwhelming. I need the ability to clear all alerts without checking on the 5000 alerts individually. I'd like to see just red alerts where Sophos could not clean up the issue. We see red alerts even when the issue has been resolved. So if it had been resolved it could change to a different color to still be able to see that there was an issue, but it doesn't need attention. Working for a school district we need to manage Sophos easily and efficiently due to time constrictions. Thank you!

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  6. Root Cause Analysis - Allow save of layout for Visualize tab

    Root Cause Analysis allows for a convenient re-arranging of the items in the Visualize tab, but that layout disappears when you navigate off the tab or page. Need an option on the Visualize tab to save the layout.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  7. Root Cause Analysis - Print or save to PDF

    Provide a means to print an RCA in a presentable format. Perhaps allow to save/export that report to PDF.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  8. Batch update / scan action when selecting multiple machines/servers

    Batch update / scan action when selecting multiple machines/servers for Chemung NY

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  9. API

    It was usefull to get all active Customers with ALL active liences via API

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  10. Drill down / pivot in event or alert reports

    Alerts: Please add ability to click somewhere on the Alert line to drill down or pivot to the details of the alert. In the popup/window, for file related alerts like PUA, please provide the file name and path, hash, and date metadata.

    Events: In the reports like Web Stats, thanks for the ability to click from the Summary into a list of events. However, the list is still only a summary for that user/computer. Please allow further drill down/pivot such that when we click on a line/event, it actually shows the sites visited which would aid in categorization correction or…

    1 vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  11. 3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  12. Subnet/site based update cache detection

    The current mechanism which client devices use to detect their local cache server has been deemed 'not appropriate' for our organisation, which has one main HQ office, but several dozen smaller satellite offices around the country with low speed internet links.

    The concept of our 2000+ HQ PC's attempting to perform of http request to each satellite cache server will introduce high levels of excess bandwidth on an already stressed link.

    Could sophos consider the Microsoft AD sites/subnets mechanism where we can define our site office subnets, allowing a client to choose its cache server based on its own IP.

    4 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  13. Allow email alerts in cloud to have more control

    Allow email alerts to have more control of what's being alerted. Right now we're getting alerts for machines that need to be rebooted, yet they're being reimaged so they will get rebooted anyway.. Rate this as a 3.

    20 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  14. sys

    We would like Sophos Central to be able to "send" SysLog information to our SIEM from all of our sub-estates.

    2 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  15. Sophos Central SIEM integration - additional fields in logmessages

    We are working on integrating Sophos Central logging with our SIEM platform.
    Within a SIEM environment events are correlated based upon two important fields:
    - The username
    - The ip address of the workstation.

    In the current log message these two fields are not available.
    We currently get the workstation name but not its (internal or public) ip address.

    The full name of the user is present in the current log message but not the username and associated "AD domain".

    In order to be able to use the full potential of the SIEM integration we need these two fields to…

    5 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  16. Restrict source IP for Administrator logins

    We need to be able to restrict the IPs that are allowed to log in to Central with administrator privileges. For example, we would only want our administrator accounts to be able to log in from our corporate network and not from anywhere outside. That way if the credentials became compromised they still couldn't be used by anyone outside of our corporate LAN. This combined with 2FA (which appears to be coming soon) would greatly improve the security of your product.

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  17. Option to be able to Purge stale machines from Central Admin

    Quite a few customers requested purge option, to say - remove all of the machines , which have not checked it with Central in more than 60 days.

    13 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  18. RCA

    Retention of Root Cause analysis for historical and investigatory purposes. Currently, all RCA instances are only available for 90 days. There is no way to export or save all the information, or the ability to say, Flag for future analysis

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  19. Add back the boxes that indicates the number of High Medium and Low alerts.

    Add back the boxes that indicates the number of High Medium and Low alerts. Before 8/16/17 on the dash board you had the Alert Boxes the High Medium and Low. We liked this options felt that it gave a quick indications of what was going on.

    3 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  20. I wish Sophos cloud would send notiication if one of the Sophos related services is not running.

    I wish Sophos would send notifications if one of the Sophos related services were not running on a particular endpoint. I'm using Sophos Cloud and in this example, a computer had been running for a few days without the Hitman Pro service ransomware protection running and I was not notified. The rest of the Sophos Endpoint services are running. Please advise. Why you don't have these alerts enabled and when I can expect to have this feature.? Thanks

    7 votes
    Sign in
    (thinking…)
    Sign in with: Facebook Google Sophos Features & Ideas Laboratory
    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Cloud Console  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base

icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-avid-secure icon-lightbulbCreated with Sketch.