Endpoint Protection
Suggest, discuss, and vote on new ideas for Sophos Endpoint Protection. Comprehensive security for users and data
-
Deletion Infected Archive File
Dear Concern,
If any kind of malicious content in any archive file that should delete all archive file from system, rather extract and clean only infection admin should have that setting on Cloud portal where admin will decide to delete infected archive.
1 vote -
Sophos Central Send Reports to Cloud (Sharepoint\Dropbox\Box\AWS...)
Currently, Event Reports only do 6 months of reports and gets sent via email.
I would love to generate .pfd's of all my reports but our attachment limit via email is 10MBCould you not allow or link a URL to a Sharepoint\Dropbox\Box\AWS cloud storage share?
Sign in verify the user login then collect reports there.2 votes -
I need to access my sophos Enterprise console through Web in intranet not Internet.
How to access my console through web in intranet.Symantec have a this features.
No need to login my server if there in my server over the network i able to access console using Port address via like (https:\\1.1.1.1:port number).
i want same features in sophos console.
1 vote -
new
Even though folder exclusions recommended by Microsoft for Exchange Server 2016 are added to the Automatic exclusion list added to the servers, the recommended Exchange Server 2016 processes are not being added by Sophos Central. Would suggest to add those and the file extensions also.
1 vote -
Sophos Home Premium for Linux
Sophos Home Premium is only available for Windows, why not for Linux and Macs. There are a large amount of Linux users that would value a Premium license for Linux home users. Not sure how secure is the free version of Sophos Linux AV. I'm sure users of Home Premium would valus te ability to see their Linux devices in the Sophs Home portal.
1 vote -
Right click scanning without UAC Server 2012 R2
Terminal Server users on Windows Server 2012R2 are not able to do right click scanning without be prompted for UAC. I contacted Sophos with this issue and the outcome was: the product is designed in such a way that on the server 2012 R2 the user will be prompted for credentials to run a right click scan. They recommended to make a feature request.
1 vote -
Manage Sophos remotely via command line
Trying to automate the process for Sophos Protection for SCCM. I would like to be able to remove a machine from the database (single machine) so that when the machine is reimaged it gets put into the correct group and no need to worry about the wrong policies being applied?
2 votes -
lockdown
would be nice to be able to see more lockdown events than 24 hours and also to be able to search/filter by date range. Also, why cant we get email alerts when lockdowns happen?
2 votes -
Root Cause Analysis for attacks from remote machines
We recently had an incident where there was a Ransomware detection from a remote internal server that was stopped by Intercept X. It turns out that it was a false positive, however investigating to get to that conclusion was a problem as there is only a generic event created in Sophos Central but no Root Cause Analysis. If you look in the Windows event viewer logs for hitmanpro, you can see which files were affected and where the attack originated from, so the information is available but not being used within Sophos Central. When it comes to critical detections like…
1 vote -
Report the active websites in Exploit Prevention
When getting an ROP, HeapSpray, StackExch exploit detection, it would be nice to know what site(s) the user was on at the exact time of the detection. This would allow us to look at whether or not the site caused the detection. We can even access the site from our detonation chamber to test.
1 vote -
Need to work on clusters with DRS
Should work on VCenter Clusters with DRS on
1 vote -
Remote sdu
It would be helpful to be able to start an SDU through Sophos central instead of having to connect to the computer in question and start one.
3 votes -
Website/IP exclusions for Linux
Allow us to add exclusions, especially to MTD, for websites/IP addresses in Linux. We have VMs in a cloud environment that are constantly talking to a monitoring host. Without those exclusions CPU usage is really high.
1 vote -
Proxy AND Translate Web Control Categories
Please separate translate and proxies in blocking websites.
We are an international company and need to translate words from one language to another. These sites serve a business purpose and I'm adding numerous exceptions just so team members can do their job1 vote -
Changing of license type from Advance to standard in portal
Client mentioned below:
Client advised that they are using command line method to deploy Sophos Antivirus
but they didn't found in below KBA for option for Standard and advanced license product option
and due to that they need to login to each client portal -> go to Licensing -. and then change the license type from Advance to Standard
and he is looking something automatize through command line as in below KBA
https://community.sophos.com/kb/en-us/127045
Advised him, currently there is no option, however he may go as a feature request which go towards the Sophos developing team but unfortunately we don't have…
1 vote -
Excessive requests to reboot endpoint clients in the Sophos Enterprise Console.
It seems that the higher up the ladder that the user is, the harder it is to get them to reboot. The disruption that closing their many, many, multi-tasking windows left open as project or task placards, makes it extremely difficult for them to pick up where they left off.
Then a week after I had convinced all of my users to reboot for an update, I had another warning in the console to reboot all of the clients again.
And now two weeks later, I have a new warning to reboot the endpoint users for Hitman.
If we keep…
8 votes -
Thin Client/Lightweight Version
For thin clients that do not have more than a few GB to spare for an anti-virus solution, a lightweight version of Sophos which is conscious about the amount of space it uses would be helpful.
2 votes -
Reset Summary Intercept X on Windows
I would love to suggest to implement the Summary Reset button that u have within the Sophos Endpoint on Mac computers into the Windows version of the Sophos Endpoint.
That way windows users can easily reset their Sophos Endpoint Summary page, that will help our customers have a clearer view of the events when giving an endpoint to a new user.
9 votes -
Fix the Running malware in quarantine or cleanup failure indicator in Sophos Central
We're constantly having hosts that have a status of red because Sophos is falsely reporting that "Running malware in quarantine or cleanup failure" Can we fix this or have an automated process to delete the events.db?
4 votes -
Sophos Central - Scheduled Scanning
In Sophos central console, Threat Protection>Scheduled Scanning it shows the only option for weekly scanning but we can not schedule scans on a weekly basis as Sophos utilize lots of primary memory and thus machine gets slow. I would like to get an updated version which provides monthly schedule scanning. It would be very helpful if we get this option on Sophos EP.
2 votes
- Don't see your idea?
