You can create multiple email security policies which can be applied to users, groups and domains.

A policy is a set of options that Sophos Central applies to protected mailboxes.

Policies will be applied from the top down, for example, if a user is added to the policy at the top of the list, those settings will take precedence over any settings in other policies the user is a part of.

You can add a combination of users, groups and domains to a single policy. When an email comes through, Sophos Email will check whether the address corresponds to a single user, a member of a group or a member of a domain. It will then apply the policy settings if the address matches any of them.

To find out how policies work and how you can use them to customize security settings, see About Policies.

To find out how to create and edit policies, see Create or Edit Policies.