• Alerts doesn't show time

    Vincent Oomen
    Vincent Oomen
    Hi, When in Sophos Central, looking at the alerts, there are no timestamps shown. However, there is a row with {{$$scope.formatTime($$row.when)}}, which I pressume is the timestamp of the alert. What can be done to solve this, so {{$$scope.formatTime…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • A bug in CM

    rfcat_vk
    rfcat_vk
    Hi folks, while experimenting with the XG V19.5 GA I found a little bug in CM display. I have two XGs, XG115W main firewall and a software version as a test XG (see signature for details). The issue is while resolving the test machine access to the…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Unlink super-admin account from Central account to add it to another Sophos Central account

    Miguel Hernandez4
    Miguel Hernandez4
    Hello, We have a productive Sophos Central environment and one of our team members created a Sophos Central free trial account for lab purposes. Now we need that the email used for the super-admin user in the free-trial environment to be released…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Reset Health Status for devices reporting Failed to Protect Computer

    RussellDodson
    RussellDodson
    Hi All, A bit of a newbie question I suspect, but here goes anyway. We manage lots of computers across numerous schools from Sophos Central. We have some computers that are reporting a status of "Failed to protect", which I suspect is because they never…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • "Sophos Cloud: Sophos has released a product update" Bad Link

    CyberEagle
    CyberEagle
    The email notification to report that Sophos has release a product update points to " ">central.sophos.com/.../controlled-updates" instead of " ">central.sophos.com/.../controlled-updates-server" 
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Sopos central

    Kevin Otieno
    Kevin Otieno
    Dear team, We lost our logins to Sophos central dashboard for our company, therefore, we are unable to activate endpoints. Could you help change the email and authentications please?
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Exempt specific devices from requiring check-in?

    jminett
    jminett
    I would like to exempt a select few devices from the requirement to check in, as we have some computers that sit on the shelf powered off and disconnected until a user requires them, as well as some meeting room laptops that are not regularly used. These…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Need help with reports-Policy based report

    RMMSD
    RMMSD
    I tried to generate a report where it shows which machine is assigned with which policy, but couldnt find any. Can someone point me to the report which can show which computer has which policy OR how to export list of machines under a specific policy…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Sign-in with Microsoft is temporarily unavailable. Please try again

    Ahmet Cilo
    Ahmet Cilo
    I've been trying to get a password by screen of forget password for loging "Sophos Admin Central" since yesterday. I've taken A verification code by the mail address, but at the next step, the Microsoft 2FA verification screen (I sent it in the attachment…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Full list of values under 'Type' in API

    kevin robertson
    kevin robertson
    Hi, Under this API - https://developer.sophos.com/docs/siem-v1/1/routes/alerts/get , there is a value returned which is 'type' and it has such example replies such as 'Event::Endpoint::OutOfDate' - does anyone have a full list of these values exactly…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • How to know from logs that the detected virus had been cleaned successfully

    John Zack1
    John Zack1
    Hi, team, I am new to Sophos, and now working to load Sophos log data into a SIEM platform. Currently the logs loaded are sth like: ThreatInstanceID: "538983" ThreatType: "1" FirstDetectedAt: "2022-09-27 19:11:05.0" ThreatSubType: "0" Priority: "500…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Advice with AD Sync migration Azure AD Sync

    666Trooper666
    666Trooper666
    Hi, Can someone please weigh-in on this to see if I have this right? And please state if you have done this before ;) To migrate from away from AD Sync to Azure AD Sync, do we: Stop On-Prem AD Sync service Disable the AD Sync service Login…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • How can I view Acknowledged alerts?

    Lane Wilkerson
    Lane Wilkerson
    Is there a way to view alerts that have been marked as Acknowledged in Sophos Central? This has to be possible, but I can't figure out how to do it. I tried using the information here , but there is no option that says " Show acknowledged alerts ". …
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Adding comments/notes to devices and users

    Sreeraj P
    Sreeraj P
    Is there any way to add comments/notes to devices and users in Sophos Central?
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Sending process creation logs to SIEM

    Greg Ford
    Greg Ford
    Is it possible to ship process creation - and other telemetry - from XDR/Central to SIEM? CrowdStrike has an FDR feature to write telemetry to S3, allowing you to consume it within Splunk etc. MS Defender for Endpoint (MDE) has something similar with…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Forgotten Sophos Central Login PIN

    Jacob Cain
    Jacob Cain
    Good morning folks. I've hunted around and searched through the site here, and no where can I find a way to reset the PIN for my MFA. I'm still fairly new to the software, so I am assuming that I'm missing it and not that it's just not there. Is there…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Third Party Connector Missing

    acs
    acs
    Hello I remember seeing an option to tie in Microsoft 365 into Central to help provide Sophos with logs for any lateral movement across a network. I am not talking the Sophos email security product here, anyone else see this missing from their portal…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Sophos Central Log Analysis

    Administrator User767
    Administrator User767
    What are the best tool available for Sophos Central Log Analysis? Is there a way to move the logs from Sophos Central either to a Log Server or Cloud VM and deploy the log analysis tool to generate insights?
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Can't scroll down "Firewall Management" Page

    David Moro
    David Moro
    Hi guys, since the last central update i can't scroll down my firewall list under "Firewall Management" section, when i scroll down the page move me to the top automatically.
    • over 2 years ago
    • Sophos Central
    • Discussions
  • AD Users on RDS-Servers don't appear in Central?

    Michael Bross
    Michael Bross
    Hey, I've got a question regarding Sophos Central / Intercept X for Servers / Remote Desktop Session Hosts. We got a Terminalserverfarm with four Session-Hosts, all equipped with Intercept-X for Server. There is a policy which restricts web-browsing…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Automatic language change

    kerobra
    kerobra
    Since a few days, all our logins to Sophos Central Accounts (partner/customer) are automatically switched to "German", but we prefer using all accounts in "English". I can change the setting only for the current session, with the next login it begins…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Add option to disable caching of updates that have already been installed.

    Pegasus
    Pegasus
    Related to case #050608098, I discovered Central Endpoint (Server on Windows) keeps a multi-gigabyte cache on each endpoint. Please add a "minimize disk space" option that deletes updates as soon as they are successfully installed and does not keep a…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Non working 2FA setup for Sophos Central

    Joshua WONG1
    Joshua WONG1
    Hi Recently I created a user account to log into Sophos Central. Once I provided the password, the site stated that I need to create a 2FA method. I clicked Next and I was prompted to enter a security code sent to my email and I had to create a 6…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • alert emails

    Jefferson Cavalcante
    Jefferson Cavalcante
    Good Morning! I've been having a problem for a while and I receive the endpoint alert emails, could you help me?
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Endpoint Update Interval Recommendations

    Sophos User6514
    Sophos User6514
    When an endpoint in Sophos Central shows an out-of-date device that needs updated... Is it better to force an update through Sophos Central Admin Dashboard or wait till it checks for updates automatically on the scheduled day/time? Any suggestions or…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
<>