There are several alerting methods used in Enterprise Console.
Alerts displayed in the console
If an item that requires attention is found on a computer, or an error has occurred, Sophos Endpoint Security and Control sends an alert to Enterprise Console. The alert is displayed in the computer list. For more information about dealing with such alerts, see Deal with alerts about detected items.
These alerts are always displayed. You do not need to set them up.
Events displayed in the console
When an application control, firewall, patch assessment, web, data control, device control or tamper protection event occurs on an endpoint computer, for example, an application has been blocked by the firewall, that event is sent to Enterprise Console and can be viewed in the respective event viewer.
Alerts and messages sent by the console to your chosen recipients
By default, when an item is found on a computer, a message is displayed on the computer desktop and an entry is added to the Windows event log. When an application control, data control, or device control event occurs, a message is displayed on the computer desktop.
You can also set up email alerts or SNMP messages for administrators.
This section describes how to set up alerts to be sent to your chosen recipients.