Network access event types
These are the event types related to network access you can see in Sophos Central.
Depending on the features included in your license, you may see all or some of the following event types:
Peripherals Control
Event type | Severity | Action required? |
---|---|---|
Peripheral detected | Medium | Yes |
Peripheral allowed | Low | No |
Peripheral restricted to read-only | Low | No |
Peripheral blocked | Low | No |
Firewall
If you have a Sophos Firewall registered with Sophos Central, your computers can send regular reports on their security status or "health" to Sophos Firewall. These reports are known as "security heartbeats".
Event type | Severity | Action required? | Description |
---|---|---|---|
Missing heartbeat reported | High | Yes | A computer is no longer sending security heartbeat signals to a Sophos Firewall but is still sending network traffic. The computer may be compromised. A Sophos Firewall may have restricted the computer’s network access (depending on the policy your company set). |
Restored heartbeat reported | Low | No | A computer has resumed sending security heartbeat signals to a Sophos Firewall. |