Setting up alerts and messages

There are several alerting methods used in Enterprise Console.

• Alerts displayed in the console

  If an item that requires attention is found on a computer, or an error has occurred, Sophos Endpoint Security and Control sends an alert to Enterprise Console. The alert is displayed in the computer list. For more information about dealing with such alerts, see Deal with alerts about detected items.

  These alerts are always displayed. You do not need to set them up.

• Events displayed in the console

  When an application control, firewall, patch assessment, web, data control, device control or tamper protection event occurs on an endpoint computer, for example, an application has been blocked by the firewall, that event is sent to Enterprise Console and can be viewed in the respective event viewer.

• Alerts and messages sent by the console to your chosen recipients

  By default, when an item is found on a computer, a message is displayed on the computer desktop and an entry is added to the Windows event log. When an application control, data control, or device control event occurs, a message is displayed on the computer desktop.

  Note: Optional user-defined desktop messages are not displayed on computers running Windows 8 or later.

  You can also set up email alerts or SNMP messages for administrators.

  Note: If you want to use authenticated SMTP for email alerts, see Sophos knowledgebase article 113780.

This section describes how to set up alerts to be sent to your chosen recipients.