Alerts

The Alerts page lists the alerts that require your attention.

For each alert, the list shows the event that caused the alert, when it occurred, and which user and device are affected.

The list also shows the severity of alerts:

Gray info sign for informational alerts

Orange warning sign for medium-priority alerts

Red warning sign for high-priority alerts

Acknowledge alerts

Select one or more alerts and then click Mark as acknowledged to remove the selected alerts from the list. To display acknowledged alerts, select Show acknowledged alerts in the drop-down list above the table.

Note Acknowledging an alert does not resolve the event that triggered it.
Important Alerts are automatically deleted from the Sophos Mobile database after 90 days, even if you have not acknowledged them.

Set up email reports for alerts

Sophos Mobile sends email reports for all alerts that have not been acknowledged yet. For information on how to set up the list of recipients and the notification schedule, see Configure Email.

Which events trigger alerts?

Alerts are created for the following events:

  • Compliance violations for which you have activated the Create alert action. See Create compliance policy.
  • Resolved compliance violations
  • Device lifecycle changes:
    • Add device
    • Enroll device
    • Unenroll device
  • Important device actions:
    • Wipe device
    • Lock device
    • Locate device
    • Reset password
  • Exceeded thresholds of cellular data usage
  • Successful and failed tasks
  • Undefined placeholders that are used in profiles or policies
  • Upcoming expirations of the following licenses and certificates:
    • Sophos Mobile license
    • Apple Volume Purchase Program (VPP) license
    • Apple Device Enrollment Program (DEP) license
    • Samsung Knox Premium license
    • Sophos Mobile server’s SSL/TLS certificates
    • Apple Push Notification service (APNs) certificate
    • Root and client certificates configured in profiles and policies
    • Device certificates
  • Additional events for APNs certificates:
    • APNs certificate renewed
    • APNs certificate revoked
    • No APNs certificate configured
  • Sophos Mobile Security events:
    • Malware detected or cleaned up
    • PUA detected or cleaned up
    • Low reputation app detected or cleaned up
  • Android enterprise events:
    • Google communication errors
    • Unapprove work app used in task bundles