OK, Now that I have been using this for a while there are a couple of things that would make this dashboard better, and by better I mean a whole lot better, and possibly not just the dashboard, but the application also.
1. Whenever there is an error, or an alert, or whatnot, and it says something like reboot required, or policy not in compliance, or realtime protection disabled, there should be a friendly little link or button that then makes the agent take care of restarting, whether on a scheduled time or immediately, brings the device back into compliance, or resumes realtime protection.

2. when there are issues that the friendly little button above can't take care of, then the agent should be able to step in and either repair, or reinstall the application, whether asking me about it or not, whether by policy or not, if the agent is not there to ensure that the software can be reinstalled and repaired, why have an agent?

3. If there is a need to repair/reinstall then the option should not default to "here are the install files, have at it kid!" by all means that should be an option, bun not the only one, one needs to be as in suggestion #2 above, and have the agent perform the reinstall/repair.

4. Under licensing there needs to be something that allows me to see what products are installed where. I keep getting a message that I'm over-licensed on intercept X , but can't for the life of my find out which machines it is installed on.

5. If I set up a local update store, and then I download the installer, it should find the local store by default, and pull its installation files from there, before going to another farther store, and ultimately to Sophos servers. I am partly through a computer refresh that installed Sophos after joining the domain, and although there were local update servers set up, and the software is supposed to pull from the nearest one, it did not, and it actually went straight to Sophos servers which caused the internet connection at each office to grind to a halt, as each of 10+ machines attempted to download the install files directly from the mothership, skipping the local server entirely.

I thank whoever reads this and hope you take it for what it is, an attempt to provide creative feedback to improve the product, even though at times it gets close to a rant.