Sophos Central

Suggest, discuss, and vote on new ideas for Sophos Central. The unified console for managing your Sophos products.
Please raise all product releated feature requests in the respective product forum

Sophos Central

Suggest, discuss, and vote on new ideas for Sophos Central. The unified console for managing your Sophos products.
Please raise all product releated feature requests in the respective product forum

Suggest an Idea for Sophos Central...

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. encryption

    Add option to allow device or software based encyrption - yes this can be achived by GPO, but this would cover machines not on an AD domain or ones which may be disconnected from the domain for considerable time (i.e. those that would really be benifit from encyrption).

    Also it would be useful in reporting encryption status to highlight machine using hardware encryption SSDs which are known to be flawed (reporting the encyption type is mentioned in several other suggestions) to help with compliance.

    1 vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • sso
    • facebook
    • google
      Password icon
      Signed in as (Sign out)

      We’ll send you updates on this idea

      0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
    • Windows Lockscreen Configuration

      Hi,
      User reported that Windows Spotlight / lockscreen image change is not working after Sophos installation.
      As we gone through below KB article, it seems lock screen and spot light images are managed by Sophos Safeguard (the credential provider).
      We confirmed that after sophos installation it’s happening to all laptops. PFA snapshots and mails FYKR.
      Raised a case with Sophos (Case ID # 8378537), and the said it’s not possible. “There is no official way to change the lockscreen on a machine protected by SafeGuard Enterprise, this is by design.”
      Our issue is spot light images are not changing automatically,…

      1 vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • sso
      • facebook
      • google
        Password icon
        Signed in as (Sign out)

        We’ll send you updates on this idea

        0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
      • Pre-boot Active Directory authentication

        Having Pre-Boot AD authentication would be exactly what we need.
        It has many advantages especially towards ease of use for users.

        1 vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • sso
        • facebook
        • google
          Password icon
          Signed in as (Sign out)

          We’ll send you updates on this idea

          0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
        • Search by recovery key

          How horrible is this control panel that you can't even find a computer by the Recovery key... you manage 1000pcs how am I supposed to find a computer when the user doesn't know the hostname or username?

          sophos... please, this is trivial! I wish i could kill the person who decided to buy this rubish!

          1 vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • sso
          • facebook
          • google
            Password icon
            Signed in as (Sign out)

            We’ll send you updates on this idea

            1 comment  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
          • Email Recovery Key

            A nice feature might be the capability to email a user their recovery key direct from the management console.

            1 vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • sso
            • facebook
            • google
              Password icon
              Signed in as (Sign out)

              We’ll send you updates on this idea

              0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
            • Need to add a new feature to Sophos AP

              Need to add a new feature to Sophos AP - if some ones mac id is not entered in the Mac Host the person wont be able to connect to AP. By this way we can prevent a person entering in firewall and block him to access intranet features. As i have observed in other AP's such as RUCKUS - it has this feature in it.

              1 vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • sso
              • facebook
              • google
                Password icon
                Signed in as (Sign out)

                We’ll send you updates on this idea

                0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
              • Forcing encryption on macOS

                When the Sophos agent on Mac OS tries to enable encryption an end user has the ability to postpone. As this postpone button has no end date or deferral a user can put off encryption indefinitely.

                Please enable an end date for encryption to be forced or a deferral limit.

                1 vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • sso
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)

                  We’ll send you updates on this idea

                  0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                • Allow encryption to be resumed from Sophos Central console.

                  With Sophos Central, I sometimes get notifications that Encryption has been "suspended". It would be very helpful to give administrators the option to re-enable encryption from the console. We should not need to go to the machine itself to re-enable.

                  4 votes
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • sso
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)

                    We’ll send you updates on this idea

                    0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                  • Display more encryption details

                    For auditing purposes, it would be really useful if the encryption information included

                    * The timestamp of the last time the encryptions status was verified
                    * Details on the encryption type (eg XTS-AES 256)

                    Ideally there would be the option to save a spreadsheet/report containing this info for all encrypted systems.

                    This would allow auditing compliance to be much easier.

                    3 votes
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • sso
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)

                      We’ll send you updates on this idea

                      0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                    • Check Mac Encryption Status More Frequently

                      One issue we have in our organization with Sophos Central Encryption is that there isn't a way for us to have the Macs encrypted until after the user logs in and enters their password in the prompt. Many users are postponing the prompt, and then we need to reach out to the user to enter their password and not keep postponing it. The issue is that when a user does postpone it, it only comes back about once a day or if they reboot the computer. It would be nice to have this pop-up every hour so it essentially keeps…

                      3 votes
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • sso
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)

                        We’ll send you updates on this idea

                        0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                      • Barcode Scanning of Recovery Key

                        When displaying an encryption recovery key, it would be useful to have a barcode displayed that we can use instead of typing the code manually. This would allow us to plug a barcode scanner into the target computer and just scan the code.

                        This is used in Cauliflower Vest https://github.com/google/cauliflowervest

                        1 vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • sso
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)

                          We’ll send you updates on this idea

                          0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                        • Unnecessary Device encryption "Alerts" on the endpoint

                          The new endpoint client on Windows 10 computers displays a red alert that says "Some services are missing or not running" and also that "Data Protection is off". These messages may contribute to unnecessary help desk contacts from observant end users worried about their protection. In reality, we haven't enabled data encryption on purpose and have no intention of enabling it on all systems. These alerts are unnecessarily disconcerting and you should provide us a means of disabling them.

                          4 votes
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • sso
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)

                            We’ll send you updates on this idea

                            0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                          • Manage Bitlocker password

                            Please add the ability to change the Bitlocker password for a device from within Central. Perhaps from the policies.

                            5 votes
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • sso
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)

                              We’ll send you updates on this idea

                              0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                            • Review Encryption Dashboard and Report Filtering

                              Sophos, I'm hoping you can improve the encryption dashboard & their reports. I have 5 x PCs currently licenced (trial license) with Sophos encryption. Although encryption is working perfectly (the drives are encrypted and licenses checked out correctly) the dashboard doesn't reflect any of this. The dashboard just shows me all my 300+ endpoint protected devices. Additionally the reports don't allow filters on encryption so I can't easily find PCs that Sophos is managing with encrypted drives. Only way I can do this is to download a csv and filter myself.
                              Positive feedback is that I luv the cloud product…

                              1 vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • sso
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)

                                We’ll send you updates on this idea

                                0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                              • Help Desk to assign Device group if none assigned

                                Ability for Help Desk to change a device group if the device isn't in one

                                2 votes
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • sso
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)

                                  We’ll send you updates on this idea

                                  0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                                • Allow Central to detect Endpoint OS versions, so that Windows 7 Professional devices cannot be assigned to CDE

                                  When Windows 7 Professional devices have CDE installed/assigned (nothing is actually installed) this stops SGN from being installed. If the behaviour in Central was changed so that Windows 7 Professional machines cannot have CDE assigned, then this would not be a problem.

                                  2 votes
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • sso
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)

                                    We’ll send you updates on this idea

                                    0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Add MFA for cloud central login

                                    It’s deplorable that, as a security vendor, you don’t have the option for multi factor authentication for your sophos central login. Please fix this

                                    7 votes
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • sso
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)

                                      We’ll send you updates on this idea

                                      0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Installer downloading error message

                                      While downloading the softwate installer around after 80% I received an error message "Error 41" and did not download further

                                      1 vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • sso
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)

                                        We’ll send you updates on this idea

                                        0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Add file encryption

                                        Please add:
                                        1) Possiblity to encrypt only choosen volumes
                                        2) File share encryption
                                        3) Removable device encryption.
                                        4) Persistent encryption (possibility to force encryption with outgoing data to usb or share)

                                        4 votes
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • sso
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)

                                          We’ll send you updates on this idea

                                          0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Help

                                          I can download Microsoft malware but cannot open it and run it

                                          1 vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • sso
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)

                                            We’ll send you updates on this idea

                                            0 comments  ·  Device Encryption  ·  Flag idea as inappropriate…  ·  Admin →
                                          ← Previous 1
                                          • Don't see your idea?

                                          Feedback and Knowledge Base

                                          icon-data-protection icon-endpoint-protection icon-phish-threat icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-central icon-sophos-mobile icon-sophos-utm icon-sophos-utm icon-sophos-utm icon-web-appliance icon-xg-firewall icon-xg-firewall icon-lightbulbCreated with Sketch.