Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 11 subscribers
  • Views 5950 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Threat Protection Reporting in Sophos Central?

Jason Williams

I'm trying to provide some high-level statistics to senior management on our Endpoint Protection.  I'd like to provide some metrics, such as how many systems are protected, how many malicious files were detected, how many were quarantined, etc.  However I do not see anything in our Sophos Central that provides any numbers on Threat Protection.  In fact, the reporting is really kind of terrible that I don't see many metrics at all. 

On my dashboard, I have a grid for Usage Summary and Web Stats, but that's it.

I have "Super Admin" access, so am I missing something somewhere?  Or is this just not a capability of the platform?

Thanks.



This thread was automatically locked due to age.
Parents
  • 0

    We are looking at adding a malware report to more easily see what has been detected. In the meantime, the events report is the best place to see malware related data, and the computers report is the best place to see a list of protected computers, as noted previously. I have suggested below a list of event types to select to retrieve the right types of data regarding malware.

    The intention is to release a simple malware report (with a list fo tiems detected) and gradually improve it, to include information such as you suggest (e.g. clarifying which items were cleaned successfully).

    We will be releasing the ability to "save" reports soon (potentially next month, October), meaning you will not have to reselect the entries below each time, you can save them and then reopen that saved report each time.

     

    • Runtime detections
      • Running malware detected
      • Malicious traffic detected
      • Malicious behavior prevented
      • Exploit prevented
      • Credential theft prevented
      • Privilege escalation exploit prevented
      • Ransomware detected
      • Remotely-run ransomware detected
      • Ransomware attacking a remote machine detected
      • Safe Browsing detected compromised browser
      • Application hijacking prevented
    • Malware
      • Malware detected
    • Potentially unwanted application (PUA)
      • Potentially unwanted application (PUA) blocked
    • Web control
      • Web threat events
    • Download reputation
      • User deleted low reputation download
      • Low reputation download automatically deleted
    • App Reputation
      •  Low reputation app detected
Reply
  • 0

    We are looking at adding a malware report to more easily see what has been detected. In the meantime, the events report is the best place to see malware related data, and the computers report is the best place to see a list of protected computers, as noted previously. I have suggested below a list of event types to select to retrieve the right types of data regarding malware.

    The intention is to release a simple malware report (with a list fo tiems detected) and gradually improve it, to include information such as you suggest (e.g. clarifying which items were cleaned successfully).

    We will be releasing the ability to "save" reports soon (potentially next month, October), meaning you will not have to reselect the entries below each time, you can save them and then reopen that saved report each time.

     

    • Runtime detections
      • Running malware detected
      • Malicious traffic detected
      • Malicious behavior prevented
      • Exploit prevented
      • Credential theft prevented
      • Privilege escalation exploit prevented
      • Ransomware detected
      • Remotely-run ransomware detected
      • Ransomware attacking a remote machine detected
      • Safe Browsing detected compromised browser
      • Application hijacking prevented
    • Malware
      • Malware detected
    • Potentially unwanted application (PUA)
      • Potentially unwanted application (PUA) blocked
    • Web control
      • Web threat events
    • Download reputation
      • User deleted low reputation download
      • Low reputation download automatically deleted
    • App Reputation
      •  Low reputation app detected
Children
No Data
Unfiltered HTML