Browse By Tags

  • Display the date for each component updated in Sophos Central Dashboard and Endpoint UI's

    Hello, It would be a very useful feature to display the date each component was updated in the Sophos Central Dashboard and Endpoint UI's This would match on the 'Endpoint Self Help -> Policy' UI the last time policy received. It would also be useful…
  • Feature Request: More specific role management

    Hi, in Sophos Central it would be nice to create more specific roles. Especially for Firewall management. In the firewall itself you can create very specific admin roles. In Sophos Central you automatically have access on all firewalls, as soon as you…
  • Indicate a reboot is needed on the Sophos Central Dashboard

    Hello, It would be very helpful not to have to select each computer to determine if a reboot is needed on the Sophos Central Dashboard. Could a information icon be shown on the 'View and manage your computers' to indicate that a computer needs to be…
  • SIEM API script timing out

    Our SIEM stopped collecting events around 9:55am PDT today and is reporting the following: Retrieving results starting cursor: [redactec] URL: api5.central.sophos.com/.../events Error "HTTP Error 504: Gateway Timeout" (code 504) on attempt #1 of 3, retrying…
  • Downloading Reports From SOPHOS Central

    Hello! I am wanting to download a report from SOPHOS Central to show me all the devices it currently protects and for it to show me the exact Make and Model of the devices as well as the users that are using them. I want to find any older model HP…
  • Sophos Central can't login (US East Coast) though status says its working

    Trying to login to Sophos Central and it's indicating Microsoft errors. Sophos status website talks about login errors in Australia, and claims everything's been running for 9 hours without problems. Except for Ireland, where I'm not. So the status page…
  • I've discovered one of my favorite new things...

    It took a little while to grow on me, however, having to get a text code multiple times a day, to be able to log into SOPHOS Central on my own computer is just delightful. I didn't think I'd like it at first, however, now I find myself wishing that I…
  • Is there a way to have a Data Loss Prevention policy violation generate an email?

    Rather than having to go to Email Security Dashboard / Reports / Data Loss Prevention Policy Violations and look at the log, I'd like Sophos Central to send me an email when it detects a violation. I don't see an option to generate an email.
  • CM has two XG licences in reports but no data

    Hi folks I have had this issue for awhile and not sure if it has to do with v19.0 GA? I can access the XG from CM, the report hub shows the alerts, but no data. This morning I deregistered my XG from both CM and the XG while CM showed no firewall…
  • Sophos Central Notifications - No emails ever sent

    We used to use SEC and this all worked fine. We mainly used to use Email notifications to monitor when users were plugging in USB devices, and it also used to send us an email detailing which files had been copied. When we moved to Sophos central, it…
  • Azure AD Sync exclude Teams guest User

    Hello, we have the porblem, that external Users out of our O365 Tedant (e.g. MS Teams Guest Users) automaticly replicated by the Sophos AD Sync, so we habe many unwanrted accounts in Sophos. How must i set the Filter options to exclude AAD Guest…
  • Where is the Sophos Central data stored? Phish Threat...

    Hello together, the Sophos Central Phish Threat product is in privacy review in our company. We are located in germany and we have to know where the Sophos Central Phish Threat data is stored? Europe? Country? Best regards
  • Sophos Central report scheduling - Unable to do

    There is no option to Schedule a Sophos central report under Logs and Report Section, Can anyone help ?
  • Groups are not displayed in the overview, although assigned.

    Hello, in the people overview, the group names are not displayed for all customers. But the groups are assigned when I click on a person without an apparent group. Sophos support could not fix the problem. Do you have a solution?
  • Neophyte - tasked with migrating sophos AD Sync to a new server. Any tips?

    Hi all. I'm quite new to the Sophos solution and this is my first post. I've been tasked with migrating the Sophos AD synch server to a new host, as we shut down the current server. If any of you have done this before, do you have any advice and/or caveats…
  • Unable to add SAML Federated identity providers.

    Hi Team, I am unable to add SAML Federated identity providers. While adding the same I got the below error. Incorrect input or missing file. Please check the URL and try again. I have provided the IDP metadata URL in the form : https://<IDP_URL…
  • How to send sophos log to Wazuh SIEM?

    new to sophos intercept x I used this to get event log details in sample.log files github.com/.../Sophos-Central-SIEM-Integration How can I connect wazuh SIEM from Sophos? this script get log file in script log folder, so how will syslog connect to…
  • API Endpoint Health Status Reports

    I have some questions on the reporting we get out of the Sophos Centra API. We are seeing a discrepancy between client health status se see in the web interface and the reports we generate from the API. As an example I have a computer that shows in the…
  • Sophos Central computer synced with AD Sync in is managed and unmanaged group

    Hi! I have following problem. Some computers in our domain are stuck in Computers group (and have a working Sophos Endpoint Agent and all is working) and at the same time they are in Unmanaged computers group as well. I tried to unninstall Agent…
  • E-Mail notifications exclusions

    Hi, i have configured E-Mail notifications: https://docs.sophos.com/central/Customer/help/en-us/ManageYourProducts/Overview/GlobalSettings/AlertEmailSettings/index.html#custom-rules Is it possible to exclude some servers from the notifications? Regards…
  • Recoup LIcense count

    We have a number of devices that haven't been seen recently. We believe these devices may have been re-imaged or decommissioned. Our thinking is that if we deleted or removed the device from Central, it would recoup any licenses such as Protection or…
  • Delete a Sophos Central Dashboard used for testing

    Hello, We have created a Sophos Central Dashboard in order to make some tests, but we finally build a new one to use in production. How is it possible to delete the first dashboard in order to register the same email adresses in the second one ? …
  • Microsoft API permissions missing - What does it mean?

    Hi there, we received this mail over the weekend but cant find an answer in any documentation. Can anybody help clarifying what this means? Thank you all, Benedict
  • Red banner for unsupported OS in Central appearing every few minutes

    Since the weekend I'm seeing regular red banners listing unsupported OS in Central. I do have a handful of these Win7, 2008 etc so expect to see these alerts when I login to Central first time each day. However, even though I dismiss these banners they…
  • Third Part Integrations - 1 Issues

    I have the third party integration for 365 Audit Logs enabled in Central. This was enabled a week ago and continues to work well, I'm seeing data from earlier this morning and the connection as shown in Central as Connected. However, looking at the…