We would like to have a button under Mail queue search where we would be able to re-send the emails but also to transfer these emails to another appliance from the Cluster in case one of the appliance is blacklisted or for load balance.

Hello we want to use Peripheral Control.
Unfortunately it takes a long time until the directive is enforced on the devices.
It would be better if the policy is enforced when the user logs in. Policy for the user is retrieved. Additionally you should be able to push the policy from Central. This would have the advantage that administrators, for example, if they connect a USB stick, do not have to wait more than 30 minutes until they can do something.

Hi

I want to be able to apply an allowed group to users for specifically DVD drives and Mobile devices.

I have ended up creating 3 separate policies because you can only assign 1 group to a user.

Can you not make it a feature so if we want to create a dvd allow policy we can just add dvd to the policy for that group without having to block everything else?

thanks

Central Endpoint: Can define which USB ID as full ID name because currently show same model and Vendor, can't define which USB when client detected

I would like to be able allow and/or add device exceptions based on whether the removable storage device is encrypted with Bitlocker. These should be considered by Sophos as "Secure removable storage".

add feature to restart endpoint force like other vendors

When the Peripheral Control Policy is set to Control access by peripheral type and add exemptions, categories for devices that are set to Allowed should continue to log as events for those computers to know what is still being connected to them, just like it did when Monitor but do not block (all peripherals will be allowed) was defined. When the policy is set to Control, it only logs events for blocked devices which isn't helpful to audit what else might be getting connected to the computer that is being allowed and may want to be blocked after review.

Sophos is still does not disable bridging i.e. disabling the Wifi NIC when the LAN NIC is plugged in and the opposite - enabling Wifi when the NIC cable is removed.

We need the option to combine the exceptions from two oder more different USB device exception lists (Policy).

Or simply export the exception list of a policy and import (add) the list to another policy.

Make the Device Control "Add Peripheral Exemptions" window sizable to see the ID, username and other valubles in full length. Its really hard to compare a ID with a mouse over.

Also add filters or search fields to search for a MODEL or ID or a specific username.

Ability to block certain file types running from a USB device like .bat or .exe files.

This is a mandatory requirement that has come up for us consider 4000 nodes of our endpoints switching from Kaspersky. The present end point provides us a facility create automatic update task for all Microsoft and 3rd party updates which are critical or approved by administrator so that we can fix vulnerabilities. Also we can deploy 3rd party software using same to client machines.
Also it also has a feature to enable multiple policies like "In Office Policy", "Out of Office Policy", etc so that we can have multiple web and device control policies which are critical to our business.

Currently you cannot block usb-to-ethernet adapter.
There are several usb-key attack-scenarios which use the ethernet emulation to sniff ntlm-hashes from a windows PC. Is there also a possibiliry to an option to block media devices like usb keyboards, usb mouse and/or cameras? Or an option to create your own device classes.

Central Endpoint: Is it possible to add a "layout" to except USB Devices by ID combined with a Person? So the Basic Policy could block any USB Device and Exceptions are made by Person instead of a Policy which allows the Device for many Computers or Users. So the exceptions is one by one (Device ID & User).

Sophos Can block Wireless, But cannot block Mobile Hotspot running on WIN 10. This is a great feature to have.

Thanks!

Enable Fast user switching on Safeguard, so that administrator users can access the computer without closing the current user's session

Disable Sophos automatically resetting windows security settings (e.g. UAC)

This is causing an issue whereby when Sophos identifies a problem, it resets windows security settings and turns UAC back on. The environment requires UAC be turned off.

You can currently turn this off via per-pc registry key, see:
https://community.sophos.com/products/endpoint-security-control/f/sophos-endpoint-software/90238/window-security-options-being-reset-during-remediation

This would be ideally managable from the enterprise console

To combat the unknow malware (mainly don't detected by Sophos) a new Device Control option as "Block the Executable Files" can help to protect the network without lost the functionality to copy/read/delete other documents from this medias. In the business the users generally uses your USB's to transport documents (word, excel, ppt, txt, etc).

This was suggested by LINCK in community https://community.sophos.com/products/endpoint-security-control/f/sophos-endpoint-software/155/automatic-scan-of-removable-media#pi2151=1