Web Control Email Alerts
Sophos Product Information
Sophos Product: Sophos Enterprise Console
Version in Production: 5.4
Feature Request Summary
How will this new feature address your business requirements?: We need to have the ability to receive Web control events alerts where the endpoint protection has blocked a threat.
How would you rate the importance of this feature?; 1 = Critical, 5 = Nice-to-have: Critical 5
We had a user performing a routine task with an external usb device almost daily for 2 years that was dropping malicious code onto some of our unpatched windows computers managing legacy IoT devices. Sophos quietly cleaned them up everytime and we were oblivious to the ongoing threat. Recently, Sophos was unable to clear the dropped virus and we received an alert which put us onto this ongoing threat.
This is completely unacceptable from an endpoint solution. As an enterprise environment, we need a central point of immediate notification when a threat is detected. At the very least there should be the option for Sophos admins to receive notified when Sophos finds and clears a threat. This is critical to our efforts to educate our users on safer practices.
It used to be we would be spammed by all the stuff an A/V was finding. It seems the pendulum has swung too far in the opposing direction. We need to know when viruses are landing on our systems.
It is not realistic for us to have someone assigned to logging into Sophos Central daily to check logs.
Please include functionality to enable email notifications to admins when the endpoint protection has blocked a threat.