Allow actions of device quarantine from cloud console. Currently I have users with PUA in quarantine. I cannot perform any action from console. Each machine has to be touched

Allow administrator to configure thresholds for alerts in cloud console. Currently I receive many alerts for non-actionable items such as when a machine reports "Real-time protection has been disabled on a computer." Even though the computer is protected, a shut down or update causes this alert and a few moments later, the protection is OK. I need to be able to adjust this trigger threshold and the same on other items such as out-of date machines, missing updates, PUA detected, etc.

We would like to be able to create limited Administrators. It would be very useful to give access to the Cloud Console to all our members, but limiting the user and devices that they can manage. And of course, not allowing them to modify global settings, such as the Base Policy. These limits could be configured at a "Group" level, for example.

Allow the configuration of the Anti-Virus and HIPS settings to be applied for the endpoints installed on desktop computers, such as:
- HIPS configuration (enable/disable buffer overflow, suspicious behavior, malicious traffic)
- Enable/Disable on-access scanning on read, write, rename

It would be great to be able to group devices by site, dept or location. instead of having one big list of devices and trolling through to find specific ones, to be able to group the devices would be very user friendly.

Alerts in Sophos Central should group together like they did in the Dashboard in the old Sophos Cloud UI. I can view the alerts in the Reports, but I cannot action them from there.

Good morning

Is it possible to receive only to high alerts by email?
And the rest of the alerts in the portal

Thanks and regards
Titus Davidheimann Beek

we need to disable the pop-ups which we receive on endpoint system for antivirus,device,application,web control from sophos oncloud console , so request you to kindly do the needful.

Need a way to verify if an endpoint is using the latest policy. It would be great if policies were given a number or last updated field that could be compared to a client to see if it is running the newest one.

On the client for Mac OS X you have the ability to turn off "files on network volumes". If you turn it off it "jumps" back on(May be a bug). It would be great if it was possible to control scanning of network volumes from the Cloud Console through a policy.

I see it as a checkbox solution: "Do you want to scanning network volumes? Yes/No".