Hope you are doing good.
I have some questions to get answers regarding the Sophos product.
1. Is it possible to integrate Sophos with an AD solution, so it will be easy for us to manage?
2. Is it possible to set an expiration time for enabling the USB policy? Policy should be expired once the period is over.
3. Is it possible to get one maintenance token for all the host computers? In case if we need to plug a USB device into the computer we can use that code for temporary USB enables without logging into the Sophos console.
For point 2: Is it not possible to use the "Automatically disable policy at a specific time"?
Yep. this is totally possible. You can disable the policy by configuring the above settings.However, by expiry, I meant the policy is completely removed which is not possible for any of the Sophos central policies.
Ismail Jaweed Ahmed (Ismail) Senior Professional Service Engineer
Ahh, I suppose you might have to go to the APIs for that. I assume this one would do it: https://developer.sophos.com/docs/endpoint-v1/1/routes/policies/%7BpolicyId%7D/delete