This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS Mail Protection Expression FIlter & Better Quarantine Management

As a long-standing customer, I would like to contact you with a request. Sophos solutions have been a reliable part of our daily operations for many years, but there are some functions that we are unfortunately still missing in the current SFOS (XGS):

- Mail Expression Filter: this feature is essential for more precise control of email traffic.
- Support for umlaut domains: In an increasingly international and diverse domain landscape, this feature is becoming more and more important.
- Sorting the quarantine by subject: This option would make it much easier to manage and search the quarantine.
- Display of more than 20 entries in the quarantine: This function would be a significant improvement, especially for large volumes of email traffic.

We appreciate the continuous development of your products and hope that these features can be included in future updates.



This thread was automatically locked due to age.
Parents
  • Just a question, but did you look into Central Email for those things? Because all of those points are possible in Central Email for years. 

    __________________________________________________________________________________________________________________

Reply
  • Just a question, but did you look into Central Email for those things? Because all of those points are possible in Central Email for years. 

    __________________________________________________________________________________________________________________

Children
  • Hey,

    ye we've looked into that. Some Features are avaible but not all but please correct me if i am wrong :)


    - Sorting for Subject in Central Mail Quarantine is not avaialble (see red mark in screenshot):




    - Mails in Central Mail Quarantine are shown up to 50 entries. SG/UTM had a Show All Option Disappointed

  • You could catch all Emails via API or XDR. 

    Do you have Central Endpoint XDR? 

    __________________________________________________________________________________________________________________

  • Do you mean cental or Firewall API  to sort, catch and delete quarantined eMails?

  • Central Email offers XDR capabilities via LiveDiscover as well as the Central API to do this.

    The Quarantine is fully available.

    The Central API: https://developer.sophos.com/email-quarantine

    Central XDR offers via Life Discover the capabilities to interact with it on SQL level: 

    __________________________________________________________________________________________________________________

  • Hello LuCar Toni,

    Thanks for you information and your Ideas. Unfortunatly I didn't see the option via XDR to release Mails from quarantine.
    Only way we've found would be via Central API.

    Also unfortunatly Central doesnt fit in the Budget since with 200 Users is around 2-3x more than just the Email protection on some XGS.

  • The higher price comes with a much wider feature set. You could compare both with a different protection approach, as CEMA offers a wider policy customization. 

    Did you ask for an specific offer by Sophos for your customer for CEMA?

    __________________________________________________________________________________________________________________

  • It's also perfectly okay to get more for a higher price. However, that wouldn't solve the problem either. A useful handling of the quarantine emails is only possible via a separate development, which then accesses the Central API.

    Perhaps it would be possible to recreate the feature as in SG. A larger paging and sorting by subject should be customizable.

    Many thanks for your help.