send automatically alert email realtime

Hi Amoruso Roberto ,

Thank you for reaching out to the Sophos Community forum.

The following article describes the steps on how you can configure email alerts. You must be a Super Admin to manage this.

- Sophos Central Admin - Configure email alerts

Based on the screenshot that you shared, you already created a custom rule. Is it not working as expected? May I know what is your administrative role, and what is the frequency set on this custom rule you created?

Thank you Gladys. Great.
Now, i have to send real-time notification for "Email Security". I need an email alert when sophos blocks a "alert virus" message, for example.

I suspect what you're seeing is that some High alerts are generated, but email alerts are not sent out for those alerts. This is likely because "Alerts that are resolved automatically are not shown." For example, if malware is detected but is immediately cleaned up.

The following Recommended Read article published by SaschaP explains how to use API's to query Sophos Central Alerts so you can generate emails as needed. 
- PUA Alerts Handling with SIEM Events API

Does this help, or is your question specific to the Sophos Central Email product? 

I suspect what you're seeing is that some High alerts are generated, but email alerts are not sent out for those alerts. This is likely because "Alerts that are resolved automatically are not shown." For example, if malware is detected but is immediately cleaned up.

The following Recommended Read article published by SaschaP explains how to use API's to query Sophos Central Alerts so you can generate emails as needed. 
- PUA Alerts Handling with SIEM Events API

Does this help, or is your question specific to the Sophos Central Email product? 

Thank you Qoosh.

I need to receive a impost aler o virus alert when my user receive a dangerous email and sophos blocks that.