Case email alerts

By default, Sophos Fusion sends case email alerts in these scenarios:

• To all administrators when a case is created.
• To the old and new assignees when a case is assigned.

You can customize case email alerts by creating custom rules in Global Settings. For more information, see Configure email alerts.

If you created a custom rule before migrating to Sophos XDR Powered by Secureworks, case email alerts continue to follow the default behavior. You don't need to add case alerts to your existing custom rule.

Customize case email alerts

You can create custom rules that specify which users receive case email alerts and under which conditions.

To set a custom rule, do as follows:

1. Click the General Settings icon .

2. Under Platform > Notification Settings, click Configure email alerts.

   

3. On the Configure Notifications page, select the Custom rules tab.

4. On the Custom rules tab, click + Create new rule.

   

5. On the Create Notification Rule page, the Role section is open by default. Select the administrator role that the rule applies to.

6. Click Next.

7. In Administrators & Distribution lists, all administrators with the role you selected are shown. Select the administrators the rule applies to.

   You can also add distribution lists. Use this option to add the email address of your distribution lists, ticketing system, or people you want to notify but who don't have access to Sophos Fusion Admin.

8. Click Next.

9. In Devices, leave the default All computers and All servers selected. This setting doesn't affect case email alerts.
10. Click Next.

11. In Alert Types, select the types of alert to send.

    To customize case email alerts, do as follows:

    1. In Set by severity, leave all alert severities selected.
    2. In Set by product, select XDR. Deselect other options unless you want the same administrators to receive email alerts about other products.
    3. In Set by category, select Case Management. Deselect other options unless you want the same administrators to receive other alert types.

    4. By default, Case creation and Case assignment are selected. Select the case alert types you want to send.

       

    5. Click Next.

12. In Name and Description, name the rule and add a description.

13. Click Save.

The new rule appears in the Custom rules list and begins controlling case email notifications based on the settings you selected.