Sophos Central Peripheral Control - Purge Events?

Hi Chris Dalton ,

Thank you for reaching out to the Community Forum.

Sorting the data by date or last action directly in the "Peripheral Report" doesn't seem to be an option currently. You'll have to export the data first to sort them.

But if you'd like this specific feature added, you can send this as a feature request. Kindly reach out to your Account Manager to do so.

Chris Dalton said:

Is it possible for me to be able to accept that peripherals are blocked such as "Apple iPhone" "Samsung Mobile USB Modem" - Block but don't report.

Can you clarify what you mean by this, please? Do you not want these detections to send a notification to the users? If that's what you're trying to do, you may toggle off the desktop messaging option on your Peripheral Control policy.

I hope this helps. If I somehow misunderstood your question, please let me know.

Hi Gladys.

I refer specifically to the logs. Is it possible to acknowledge that a device has been blocked. eg.

User A connects an iPhone on Monday to charge their device. (Blocked by policy, log updated)

User A connects their iPhone on Tuesday to charge their device. (Blocked by policy, log updated)

User B also connects an iPhone that is blocked everyday.

The Admin looking at the logs know that it has been blocked, cant do anything with that information - The growth is exponential.  

Block but dont log it everytime.

Would creating a custom report instead work for your needs? In the UI you would need to de-select all event-types, then specify only "Peripherals Control"

You can sort the date-range as you wish with this report. 

Would creating a custom report instead work for your needs? In the UI you would need to de-select all event-types, then specify only "Peripherals Control"

You can sort the date-range as you wish with this report.