We have a goal to help a customer see what servers & endpoints are protected & not protected by sending them a report on a regular basis.
Be really nice to send missing heartbeat reports as well. No option that I've found in Central - Central is unaware of what's happening at the firewall level. I can set that up in the firewall and email to only one email address (as long as there is an SPF record for the firewall IP/FQDN - Maybe have to figure out how to setup DKIM for firewall emailing reports or just allow failed DKIM from firewalls). We generally send reports to an address so we can monitor for issues, so we'll have to go through a manual process of forwarding them to the user or send to an email distribution group.
Was trying to follow https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/LogsReports/Reports/index.html#save-and-email-custom-reports but can't setup reports in Central.
Then I'm digging and it sounds like I'm unable to do this as a partner admin.
Based on https://community.sophos.com/sophos-central/f/discussions/135245/sophos-central-report-scheduling---unable-to-do, I need to first make an admin in the sub-estate. Configuring that admin needs an email address and that's where reports will go. It sounds like we'll have to buy a Microsoft 365 license for the customer to have an account to email to. Or maybe just make a user an admin and hope they don't go changing things up. But then they are the only recipient of said report, not the management team so they will have to forward out to managers.
Reading further, custom reports stop after 6 months and need to be re-scheduled again.
Since I've never setup a custom report (I'm not an Admin even in our own sub-estate, just a Super-Admin at the partner level), I have no idea what the process looks like. I granted my account Admin in our sub-estate, but that doesn't work to be able to create reports when I am using Partner Central. I have to open a private session, login to id.sophos.com then go to Central Customer Dashboard.
I'm logged in using a private session and can save the Computer report as a "Custom Report", in addition to the existing CSV/PDF export options. Scheduling is not apparent - you see it after you choose Save as Custom report.
There is no place to customize the "custom" report beyond the report generation options. Default is to do not send an email, so I guess I would tell each management user at the customer to login, but they have to be the admin that created this non custom "custom" report so they won't be able to see it, so each of them needs to be an admin and we have to guide each of them through the process of generating the report.
Would the recommendation from Sophos be that I give all the management users Admin and send them the link to the above instructions and call it a day, hoping they figure it out?
Updated for clarity
[edited by: DavidSain at 4:22 PM (GMT -7) on 15 Oct 2024]
