Skip to content
Last update: 2022-03-29

Fix Endpoint Threat Protection policy

Ensure your Endpoint Threat Protection policies use the recommended settings.


The recommended settings offer the best security. If you must change settings to fix issues, change as few as you can and apply them to as few devices as you can.

If Account Health Check warns that policies have settings that differ from Sophos recommendations, do as follows:

  1. Click the policy name in the warning.

    Policy health warning

  2. The Settings tab on the policy page opens. Settings that differ from our recommendations are highlighted in red.

    To reapply our recommendations, select Use recommended settings. This turns on all settings except device isolation and SSL/TLS decryption of HTTPS websites (turn these on manually if you want them).

    If you prefer to reapply recommendations manually, so you can check each one, go to each highlighted setting and turn it on or reconfigure it.

    Policy settings tab

  3. Click Save at the top of the policy page.

  4. The Settings tab now shows that you have the recommended protection.

    Policy settings tab

Back to top