Skip to content

Sophos Endpoint: policies, threat protection, tamper protection and isolation

For technicians and admins who manage Sophos Endpoint from Sophos's cloud console (Sophos Central, now titled Sophos Fusion in Sophos's help): how Base and additional policies are prioritized, what the recommended threat protection settings include, using exclusions safely, tamper protection passwords, update management, and handling threat graphs and isolated devices.

Level
Intermediate
Length
About 50 minutes
Contents
3 lessons · 1 video · final exam
Status
Published · updated 2 Oct 2026
  • Sophos

Skills you'll practise

  • Predict which policy applies to a device from the policy order and explain why the Base policy is always last
  • Identify key threat protection settings (Live Protection, deep learning, CryptoGuard, device isolation) and the risk of changing recommended settings
  • Choose the safest exclusion for a false positive or a performance problem, following Sophos's guidance
  • Explain what tamper protection blocks and how per-device passwords are handled
  • Plan scheduled updates, software packages and content update stages for test and critical devices

Course outline

  1. 1.Sophos Endpoint essentialsVideo · 2 min
  2. 2.How Sophos policies workLesson · 16 min
  3. 3.Threat protection settings, exclusions and tamper protectionLesson · 18 min
  4. 4.Updates, threat graphs and isolated devicesLesson · 16 min
  5. 5.Sophos Endpoint: policies, threat protection, tamper protection and isolation: knowledge checkKnowledge check · 17 questions
  6. 6.Final exam10 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

See it with your own jobs and topics

Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.