Sophos Central
Suggest, discuss, and vote on new ideas for Sophos Central. The unified console for managing your Sophos products.
Please raise all product releated feature requests in the respective product forum
-
More information on unknown installations
It would be useful to have more information on computers in Sophos Central - in general, but specifically in situations where we need to investigate unknown installations.
- Geographic location of installation (may need to be able to disable for privacy concerns)
- Make, model, serial number of computer
- Windows version and edition (useful to know if Home vs Enterprise)
1 vote -
MacBook Serial number in Endpoint API
Include MacBook serial number in Endpoint API response
https://developer.sophos.com/docs/endpoint-v1/1/routes/endpoints/get1 vote -
Group Summary
In the Groups section, please make the whole path of the group visible. We have multiple groups named the same thing but are in different regions.
1 vote -
Scan now button missing in Threat Analysis Center
Would like to see "Scan now" menu option under "More actions" menu when using "Threat Analysis Center Dashboard" after clicking on a device to look at events/summary. It isn't there in the menu like it is under the standard "Devices" menu. 10:21am 7-19-21 Jason Taylor - Lake Land College - jtaylor11319@lakelandcollege.edu
1 vote -
Custom File Type
Email Gateway - Email Gateway Policy - Settings - Inbound
Add the option to add my own custom file types or add the following choices:
ics, img, iso, macho, pl, ppa, ps1, pst, pub, py, sh, slk, tmp, vb, vcs, wim, and xz.1 vote -
Installation Process on macOS
The standard hidden service account "_sophos" that is used during installation/setup on macOS is granted a secure token upon creation. This is NOT desired behavior as it means that Sophos cannot be installed during a preStage enrollment into an MDM solution.
Please add the following tag to the user-creation process for the sophos user so that the account does not receive a secure token: sudo dscl . append /Users/sophos AuthenticationAuthority ";DisabledTags;SecureToken"
See this article from Apple for more information: https://support.apple.com/guide/deployment-reference-macos/using-secure-and-bootstrap-tokens-apdff2cf769b/web
1 vote -
Audit
If you open a Policy and click Save without making any changes to the policy, it changes the "Modified Date" but there is nothing in the Audit Logs. This concerns our auditors as they see the "modified date" has changed and ask us for details/approvals for the corresponding change but we can't provide them any detail as there's nothing in the audit logs. If nothing has been modified, why does the modified date change?
Please either Log who clicked the "save" button so we can at least identify who caused the Modified Date to change. Or, even better, disable the…
1 vote -
Self Service Portal - Delegation
Introduce role based access / delegation permissions to permit users to monitor quarantined mail on behalf of another user through the self service portal. E.g. An assistant can monitor quarantined mail for their manager.
1 vote -
Additional Fields in the Phish Threat Click reports (User Agent and count)
Would like for the useragent to be included with the click details. This will help us determine if some "programatic" item clicked the message like another security product; or an end user.
Would also like to see the number of clicks. as some analysis tools will run the link though multiple tools and will increase the number of clicks substantially.
Respectfully,
Jay Orellana1 vote -
Sophos central when it reports that a defect in your email occurs need to allow the maintainer to quickly and easily access which email is c
On the email summary page it is easily seen any issues or protection Sophos has had to do for the incoming emails. These are seen in groups. However some categories it is not easy to find which email it is related to. An example is Authentication errors which are not seen in the reasons on the Email summary list. Further more in this list you cannot filter under authentication but have to filter via DKIM, SPF, header which takes time.
Ideally there should be an authentication filter as well and also the fault/issue should be seen in the reason for…
1 vote -
Comment Column for Endpoint Protection
It Would be very nice if the Endpoint protection had a cloumn for Device comments. E.g. An endpoint which was offline for long time could get a comment, that this Device is in use and mustnt deletd!
1 vote -
Customize Blocked Message Notification
Having the ability to customize the "Blocked Message Notification" would allow the users to understand the DLP violation. Also for the admins, it can be quicker to determine which policy the user triggered. Besides editing the verbiage, the company logo needs to be an option.
1 vote -
Allow Multiple Scheduled Scans a Day
We are looking for a solution for a customer who is wanting to have scheduled scans every 12 hours. In addition to setting a time for scheduled scans, maybe we can have an option to schedule 2 scans in a day or to have the option of setting scans the hours passed since the previous scan.
2 votes -
Email Gateway Granular Control
There needs to be more granular control to the Inbound Allow/Block list. For example, I should be able to "Allow" a certain address or domain to permit email delivery specifically for DLP violations, or allow "bulk" only for certain domains all the while still adhering to the other checks that are in place . As it stands right now if I put an email or domain on the allow list, all other checks are being ignored.
2 votes -
Per-Computer Web Control
We have 11 computers that will be checked out by patrons at the public library, and we need to implement both shared access through a guest account and Web Control policies for CIPA compliance.
On Windows 10, whenever someone logs in on a Guest account, it generates a random account ID. In our case, the first Guest log in was "shpctac0ffee" and the second Guest log in was "shpctac0ffef." Due to this, we cannot implement Web Control policies in this manner.
Per-computer web control policies would also be useful if a server is a sensitive endpoint and requires stricter controls…
1 vote -
Wild card search feature
Please add a wild card feature for search so I can mass delete devices for students that graduate.
1 vote -
Plans for translating more training modules to Spanish
Good afternoon,
We conduct our annual cybersecurity training in both English and Spanish. One of the modules that we use, “Working from home”, is available only in English. Due to the increased number of employees working from home, we consider this training to be very important. Are there any plans to translate “Working from home” into other languages, specifically Spanish?
1 vote -
Live discover scheduled query improvement idea
For Live discover scheduled queries it would be very useful to see if a report contains data. As an admin if I schedule daily queries I should be able to skip over all the entries that do not contain any data so i'm not wasting time opening them from the list. It should also be possible to create an alert or emailed report of these queries to an admin so they can be alerted as soon as possible to a suspect event or activity
1 vote -
This is a testing effort 1 for QA FSC
FSC Test QA 1
1 vote -
UPN Federated Sign In Support
Feature request to support federated sign in using the users UPN so users with an email address alias different than their UPN can use federated sign in for self service portal.
1 vote
- Don't see your idea?
