Set up policies

Sophos Central automatically applies base or default policies to all devices where you install our software.

These policies give the recommended protection against threats immediately. You don't have to change or add policies if you don't want to.

However, you might want to add additional or custom policies. For example, you might want to use different settings for specific users.

There are separate policies for endpoint computers and servers.

To add a policy, do as follows:

1. Go to the product you want to add policies for. For example, go to My Products > Endpoint > Policies.

   For each product feature, a Base Policy is applied until you’ve added and applied another policy.

2. Click Add Policy.

   

3. On the Add Policy page, do as follows.

   

   1. Select a Feature. In this example, we've selected Peripheral Control.
   2. Select a Type. In this example, we've selected a User policy, which applies to users on whichever device they use.
   3. Click Continue.

4. Enter a policy name.

5. Select the users you want to apply the policy to and move them to the Assigned Users list.

   

6. Click the Settings tab to configure the policy.

7. Edit the settings as needed.

8. Click Save to apply the policy.

   

9. On the Policies page, you can now see a new policy and the number of users or computers it applies to.

   

10. Check the order your policies are in. We apply the policies in each section in the order shown on the Policies page.

    Drag your most specific policies, such as those for specific users, to the top so that they're applied first.

Later you might want to check which policy or policies have been applied to a computer. To do this, go to Computers, click the computer name, and look in the Policies tab.