"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article describes the proactive monitoring support component of the managed appliance service provided by Sophos.
Sophos Technical Support receives notifications via two types of automatically generated alerts:
Upon receipt of one of these alerts, Sophos Support will notify the customer, using the contact information provided by the customer in the 'Appliance Support Contact' settings. The contact method used will depend on whether the alert is categorized as critical or non-critical. Responses to critical alerts are sent to the 'Emergency Contact', while responses to non-critical alerts are sent to the 'Business Hours Contact'. The target response times for notifying customers of an alert are shown below.
Heartbeat Monitor Alerts
Sophos Support receives an alert whenever an appliance has failed to connect to the threat definition repository for a period of more than one hour.
Sophos Support receives an alert whenever certain events or conditions occur on the appliance. These are denoted as critical or non-critical, depending upon the specific event or condition.
Note: if a customer has not provided Emergency Contact information, a response will be issued to the Business Hours contact.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.