For advanced debugging I need access to an appliance log files. Currently this is only available through the web console. It would be so perfect, if central would allow me to open an live trace and download option for the log files mentioned here: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/LogFileDetails.html

I don't need the files to be stored in central reporting. That would be cool - but is not needed for the moment. But with an option to run monitoring/machine learning on every single device log file (via Central API) would be a outstanding.

It would be really great if adding firewalls to Sophos central is done in a different way instead of just using a local super admin account. We are an MSP with various customers that have Sophos central.

Adding a local super admin account on each customer we have is not ideal. It means we need to have a separate active email account for each customer which is ridiculous, what if we have 100 customers, it defeats the purpose of ease of central management for MSPs.

I would like to see the ability to review logs/IPS violations/DPI errors in aggregate in some fashion. This would allow the partner to make informed policy decisions and see a larger threat landscape than needing to review each customer in a vacuum.