I would like to see the hostname of the device under the serial name in the alert, makes for quicker identification and troubleshooting. The fix couldn't be more than adding one line to the query or output generated by device.
Would look similar to this.
Sophos Central Event Details for "Customer Name"
What happened: Gateway 'WAN1_Port2_GW' is Down
Where it happened: X13302DB9FHF4B2
<Device Host Name: (Hostname of device)> <---
User associated with device: n/a
How severe it is: High
What Sophos has done so far: Check with the gateway's internet provider for any problems or outages.
What you need to do: Check with the gateway's internet provider for any problems or outages.