This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SFOS Mail Protection Expression FIlter & Better Quarantine Management

As a long-standing customer, I would like to contact you with a request. Sophos solutions have been a reliable part of our daily operations for many years, but there are some functions that we are unfortunately still missing in the current SFOS (XGS):

- Mail Expression Filter: this feature is essential for more precise control of email traffic.
- Support for umlaut domains: In an increasingly international and diverse domain landscape, this feature is becoming more and more important.
- Sorting the quarantine by subject: This option would make it much easier to manage and search the quarantine.
- Display of more than 20 entries in the quarantine: This function would be a significant improvement, especially for large volumes of email traffic.

We appreciate the continuous development of your products and hope that these features can be included in future updates.

This thread was automatically locked due to age.

Top Replies

Joel Grashorn 3 months ago in reply to LuCar Toni +1

Hey, ye we've looked into that. Some Features are avaible but not all but please correct me if i am wrong :) - Sorting for Subject in Central Mail Quarantine is not avaialble (see red mark in screenshot…

Parents

0 LuCar Toni 3 months ago

Just a question, but did you look into Central Email for those things? Because all of those points are possible in Central Email for years.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Joel Grashorn 3 months ago in reply to LuCar Toni

Hey,

ye we've looked into that. Some Features are avaible but not all but please correct me if i am wrong :)

- Sorting for Subject in Central Mail Quarantine is not avaialble (see red mark in screenshot):

- Mails in Central Mail Quarantine are shown up to 50 entries. SG/UTM had a Show All Option
Cancel
Vote Up +1 Vote Down

Cancel
0 LuCar Toni 3 months ago in reply to Joel Grashorn

You could catch all Emails via API or XDR.

Do you have Central Endpoint XDR?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Gras 3 months ago in reply to LuCar Toni

Do you mean cental or Firewall API to sort, catch and delete quarantined eMails?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 3 months ago in reply to Gras

Central Email offers XDR capabilities via LiveDiscover as well as the Central API to do this.

The Quarantine is fully available.

The Central API: https://developer.sophos.com/email-quarantine

Central XDR offers via Life Discover the capabilities to interact with it on SQL level:

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Joel Grashorn 3 months ago in reply to LuCar Toni

Hello LuCar Toni,

Thanks for you information and your Ideas. Unfortunatly I didn't see the option via XDR to release Mails from quarantine.
Only way we've found would be via Central API.

Also unfortunatly Central doesnt fit in the Budget since with 200 Users is around 2-3x more than just the Email protection on some XGS.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 3 months ago in reply to Joel Grashorn

The higher price comes with a much wider feature set. You could compare both with a different protection approach, as CEMA offers a wider policy customization.

Did you ask for an specific offer by Sophos for your customer for CEMA?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni 3 months ago in reply to Joel Grashorn

The higher price comes with a much wider feature set. You could compare both with a different protection approach, as CEMA offers a wider policy customization.

Did you ask for an specific offer by Sophos for your customer for CEMA?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Gras 3 months ago in reply to LuCar Toni

It's also perfectly okay to get more for a higher price. However, that wouldn't solve the problem either. A useful handling of the quarantine emails is only possible via a separate development, which then accesses the Central API.

Perhaps it would be possible to recreate the feature as in SG. A larger paging and sorting by subject should be customizable.

Many thanks for your help.
Cancel
Vote Up 0 Vote Down

Cancel