Skip to content

Network access event types

These are the event types related to network access you can see in Sophos Central.

Depending on the features included in your license, you may see all or some of the following event types:

Peripherals Control

Event type Severity Action required?
Peripheral detected Medium Yes
Peripheral allowed Low No
Peripheral restricted to read-only Low No
Peripheral blocked Low No

Firewall

If you have a Sophos Firewall registered with Sophos Central, your computers can send regular reports on their security status or "health" to Sophos Firewall. These reports are known as "security heartbeats".

Event type Severity Action required? Description
Missing heartbeat reported High Yes A computer is no longer sending security heartbeat signals to a Sophos Firewall but is still sending network traffic. The computer may be compromised. A Sophos Firewall may have restricted the computer’s network access (depending on the policy your company set).
Restored heartbeat reported Low No A computer has resumed sending security heartbeat signals to a Sophos Firewall.