Notification: Data protection is off

Question

In my Sophos Endpoint application I got a notification with 'Data protection is off'. Where in the Sophos Central portal do I turn it on?

Mathias Storm · Accepted Answer

Looks like they found and solved the issue: 
 
 community.sophos.com/.../131752

Mathias Storm · Answer

It seems that the issue lies in the encryption policy assigned to a device group. I previously mentioned that assigning it to a device individually did not work, but in fact that is now working. I previously had the policy enabled via device group AND assigned it to the device individually, which didn't work. I now removed that device from that group and re-assigned the policy to the device individually, and finally the device encryption was triggered. 
 So hoping for a Sophos representative to read this and take a look at assigning policies via device groups, which seems to be broken.

LuCar Toni · Answer

Basically Central Encryption is managing Bitlocker. 
 So if you "install" the Encryption part of Central Encryption via Central, the endpoint will load the Encryption Module. 
 If the module is loaded on the Endpoint but no Policy for encryption is in place, the Endpoint will show "Data Protection is off". 
 
 Data Protection needs a Policy. If you have a own Management (by SCCM for example), you do not need the Bitlocker Management by Central. So to speak, you do not need to load the encryption module to your Endpoints. 
 But you can not use any encryption feature by central. There can be only one Encryption management. 
 https://www.sophos.com/en-us/medialibrary/PDFs/factsheets/sophos-central-device-encryption-dsna.pdf 
 
 If you press "Manage Endpoint Software" under Computers, you can deselect the Encryption Part.