Email alerts on Sophos Central

Hello Oreoluwa Babalola 

You will receive an email alert with SAV detections only if there is a required action, for example, if the threat needs to be cleaned up manually. If the detection is successfully blocked by Sophos and the threat is removed automatically by Sophos Endpoint (or any automatic remediation by the software is successfully done), then there are no email alerts sent.

Please have a look at the Alerts Page and Settings FAQ for more information.

Hi Oreoluwa Babalola,

the user has to be linked to a role in Sophos Central (Admin, Read Only, Helpdesk, etc.) or just be an administrator.

Then go to Global Settings > Configure email alerts and configure e.g. a Custom Rule with the specific settings.
You'll find more information here

Best regards

Thank you.

Adding onto Dianne's comment, if you want to receive email alerts for all detections you can disable "Automatically clean up malware" under the Threat protection policy.  Detections will still be blocked but will not be automatically cleaned up.  This requires an administrative action and emails will be generated for threat detections.  The downside to this is that an administrator will need to log into Sophos Central to force a clean-up of these detections.