Separate VPN alerts from system events
Currently, all VPN established and terminated events are reported to Sophos Central as system events. This means that the normal behaviour of users logging in and out of a dial-up VPN is given the same alert treatment as a critical CPU, memory or disk event.
Please provide additional granularity under System Services - Log Settings and under System Services - Notification list so that VPN established and terminated events can be treated separately from other events and, in particular, that dial-in VPN events can be treated differently from fixed link VPNs. (We would want to raise an incident if a site-to-site VPN went down unexpectedly but not for a dial-in VPN).
This is a great idea as having to acknowledge meaningless informational events in the Central console is pointless.