There are many situations where central raises more than one alert to a specific topic. Examples:
- Firmware upgrade (Connection lost, Gateway up, Firewall upgrade completed)
- VPN/RED connection lost (Connection lost, Connection reestablisht)

I would like to change the behavior of how alerts work in central. From my perspective it would be better, if an alert is archived, when the initial incident is resolved. In an example for VPN/RED alerts this would mean: An alert is raised, if any RED disconnects from the XG (current behavior). When the RED is reconnected, central should close the initial alert with an information "connection is up again".

With this behavior, we do not need to spend time resolving "already solved" alerts. The biggest advantage with the current implementation is the detection of recurring problems. However, this could just as well be mapped via an archive with old alarms. This would make the dashboard much tidier, however, and acute faults would be detected much better.

The Sophos Central Dashboard runs full with Warnings on IPsec Connections. Message codes 17801 and 17802. I already went through the los files of the XG (The XG does not show these Messages as warnings in the Dashboard) and found out that these messages correlate with the rekey margin. Since that does not mean that the connection is terminated or means an irregular event I do not want to see those warnings on the central Dashboard.

The result is, that critical warnings are not beeing recognized...

How can I make shure that the rekeying is not permanently combined with a warning in the central Dashboard?

When you pull an MSP report from Sophos Central XG Firewall Dashboard for MSP XG License usage, It would be an idea that the report also pulls through the company name and company contact details on the report, instead of just the rest of the address and XG Serial number. Sophos support advised that Sophos does not currently support this feature.

I think company name and company contact would be useful, so resellers easily know who your billing, instead of looking up the serial number every time to see who the XG firewall belongs to.

This was suggested as a not supported feature by Sophos XG Support to log as an Idea This is regarding service request number 03290971

With the recently disclosed firmware vulnerabilities requiring us to change the admin password on every appliance (twice in the last few months!), it would be extremely helpful to be able to select each firewall from the list, click a "reset admin password" link, and set the new password from Sophos Central. While we only have a small deployment of about 30 devices, it still takes a significant investment in time to remote into each device to change the password, apply firmware updates, etc. Central Administration should allow us to do simple tasks such as this without requiring us to log into each device interface.