Sophos Cloud - General Questions

HI Sunith, 

1. While trying to create a new policy and edit the web control policy to block peer to peer, the option is grayed out? How can we change this setting.

Ans Choose Let me Specify and select Peer to Peer Snaps*

2. How good is the server lock down option?

Ans : That is a tough question based on the expectation of the outcome. It would have an option of Server lockdown (which allows only running software installed) and the policy is machine based instead of user based. 

3. If a server is lock down and we need to run an installation or update? how do we white list this installation?

Ans: Two options 1) Exclude the path and the Folder of the software installation snaps* 2) Disable Server lockdown > Update > Enable Server Lockdown.

4. How do we create groups? Any best practice methods to setting up groups?

Ans: You may create Group on Central and add existing users onto the Group or import from AD using AD sync tool . System  Settings > Active directory Sync 

5. If a malware is detected and not cleaned, how can we do this directly from the central console. we were able to clean it from the endpoint however, just like to know if we can clean it from the central console

Ans: If malware is detected and not cleaned this would mean that manual interpretation is necessary , If its detected on Endpoint it would reflect on central and you may initiate the clean from there. So the next time the system is online the command would be received and would be removed at the background. 

you may refer our Knowledge-based Articles. for more information in detail .

Thanks and regards

Aditya Patel 

HI Sunith, 

1. While trying to create a new policy and edit the web control policy to block peer to peer, the option is grayed out? How can we change this setting.

Ans Choose Let me Specify and select Peer to Peer Snaps*

2. How good is the server lock down option?

Ans : That is a tough question based on the expectation of the outcome. It would have an option of Server lockdown (which allows only running software installed) and the policy is machine based instead of user based. 

3. If a server is lock down and we need to run an installation or update? how do we white list this installation?

Ans: Two options 1) Exclude the path and the Folder of the software installation snaps* 2) Disable Server lockdown > Update > Enable Server Lockdown.

4. How do we create groups? Any best practice methods to setting up groups?

Ans: You may create Group on Central and add existing users onto the Group or import from AD using AD sync tool . System  Settings > Active directory Sync 

5. If a malware is detected and not cleaned, how can we do this directly from the central console. we were able to clean it from the endpoint however, just like to know if we can clean it from the central console

Ans: If malware is detected and not cleaned this would mean that manual interpretation is necessary , If its detected on Endpoint it would reflect on central and you may initiate the clean from there. So the next time the system is online the command would be received and would be removed at the background. 

you may refer our Knowledge-based Articles. for more information in detail .

Thanks and regards

Aditya Patel 

3. With regards to lock-down please see screenshot below, I dont see what you see.

HI Sunith, 

You are looking into User policy , You may check in Server Policy . 

Thanks and regards

Aditya Patel