Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 19 subscribers
  • Views 9499 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Feature request for Sophos Enterprise Console

BWilliams

I have a small feature request for the Sophos Enterprise Console.

In the "Event viewer" window, and especially for device control events and data control events, would it be possible to add a column for the "group" that each given workstation belongs to? This would then make it possible to check that policies are operating correctly, and would also facilitiate gathering data for monthly reports, etc.  Are there any plans to do this?

:48688


This thread was automatically locked due to age.
  • 0

    Hello BWilliams,

    with the current model Events are linked to a Computer by its ID. The Computer in turn is mapped to its current Group. This would undoubtedly ease locating the "responsible" policy (it's, unless I'm misunderstanding you, anyway not impossible now).

    facilitate gathering data for monthly reports

    In which way? The standard SEC Reports are "group-aware" and the Reporting Interface provides the necessary tables/data. Storing both the ComputerID and the GroupID (or GroupPath) at the time of the event in the Events table would lead to potentially undefined results. While the computer is guaranteed to exist the group is not.

    Having said this, adding the current group to the Event viewer shouldn't be too hard (but I'm not Sophos so I can't say how much effort it really is and whether the "shortcut" to the policy is deemed sufficiently important to justify it).

    Christian     

    :48702
  • 0

    One more small feature request for the Endpoint-Window of the Enterprise Console: fade out some tabs and columns and rearrange the order of them.

    :49716
Unfiltered HTML