SOPHOS Central Mobile Standard Corporate

What is included in Sophos Central Mobile Standard Corporate?

Sophos Central console – Cloud console for policies, apps, devices and reporting.
Device enrollment – Apple Business, Android zero-touch, Knox, QR code and self-service.
Policies and configurations – Passcodes, restrictions, Wi-Fi, certificates, proxy and email settings.
Compliance rules – Automatic actions when a device violates your defined policy.
App management – Managed Google Play, Apple Business apps, allow and block lists.
Important – No malware or web protection, Intercept X for Mobile is separate.

What are the main benefits of Sophos Central Mobile Standard Corporate?

Sophos Central Mobile Standard Corporate is the device-management tier of Sophos Mobile, the Unified Endpoint Management solution administered from the cloud-based Sophos Central console, and Corporate identifies the commercial customer category in the Sophos price book as opposed to the education and government categories. Buyers who still search for Sophos Mobile Control will find it here: that name now belongs to the enrollment app used on Android devices, iPhones and iPads, while the legacy on-premises Sophos Mobile products reached end of life on 20 July 2023.

One console – Mobile sits beside endpoint and firewall in Sophos Central.
No server needed – Cloud management replaced the on-premises server retired in 2023.
BYOD separation – Work profile and User Enrollment keep private data untouched.
Zero-touch rollout – New devices enroll themselves during the setup assistant.
Kiosk devices – Lock shared Android tablets to a single approved app.
Email gatekeeping – EAS Proxy limits Exchange ActiveSync access to compliant devices.

Which company size is Sophos Central Mobile Standard Corporate suitable for?

Company size decides less here than sector and device count. The Swiss reporting obligation follows the sector, not the headcount, so a small water utility can be covered while a larger retailer is not. The practical threshold for this product is the moment manual device setup stops scaling, which most organisations reach somewhere between twenty and fifty devices.

Does Sophos Central Mobile Standard Corporate meet the requirements of Swiss cybersecurity legislation?

The Swiss reporting obligation does not apply to every company. Under the revised Information Security Act, in force since 1 April 2025, operators of critical infrastructure such as energy and drinking-water supply, transport companies, data centres and cantonal and municipal administrations must report a cyberattack to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery, with a further 14 days to complete the report. Inside that 24-hour window this product supplies device-level facts: which devices exist, who they are assigned to, which apps are installed, which devices violated a compliance rule, plus the Sophos Central audit log, which holds administrator actions for up to 90 days and exports to CSV or PDF. What it does not do is detect the attack. Mobile Standard contains no malware detection, no web protection and no endpoint detection telemetry, so the event that starts the 24-hour clock has to be noticed by another product or by your own team. This text is a purchasing aid and not legal advice, and whether your organisation falls under the reporting obligation should be clarified with your legal advisor.

Does Sophos Central Mobile Standard Corporate meet the requirements of European cybersecurity legislation?

No product makes a company NIS 2 compliant, because the directive requires organisational risk-management measures and software only supports them. NIS 2 asks entities in scope for measures in areas including risk analysis and security policies, incident handling, business continuity, supply-chain security, asset management and access control, and the use of multi-factor authentication. This product contributes to asset management and access control through a maintained device inventory, enforced passcode and encryption settings, compliance rules with automatic reactions, and the option to restrict Exchange ActiveSync email to devices that pass those rules. It contributes nothing to incident detection, incident handling, business continuity or supply-chain security, and it provides no multi-factor authentication function of its own. Organisations that need detection and response on mobile devices must add Intercept X for Mobile, which is included in the Advanced edition.

Does Sophos Central Mobile Standard Corporate help with security questionnaires from large customers?

Yes, for the mobile-device section of the questionnaire and only for that section. It answers items on mobile device management and inventory, enforced screen locks and device encryption, remote lock and remote wipe of lost or stolen devices, separation of business and private data on personal devices, restriction of app installation to approved apps, and control of email access based on device compliance. It does not answer items on malware protection, phishing and web filtering, endpoint detection and response, log retention beyond the 90 days the Sophos Central audit log holds, SIEM forwarding, patch management, disk encryption on notebooks, or backup. Closing those gaps inside the same family is usually the cheaper route, because Mobile Advanced adds Intercept X for Mobile and answers the mobile malware and web-protection items, while the Windows and macOS questions belong to a Sophos endpoint product in the same Sophos Central console rather than to a second vendor with a second console and a second set of reports.

We help you decide. Test: Antivirus program: Best antivirus programs for Windows 2025
Compares current antivirus products for Windows and helps you choose the endpoint protection that closes the questions Mobile Standard leaves open.

What is the difference between Central Mobile Standard and Central Mobile Advanced?

The decisive difference is on-device threat defence: Advanced includes Intercept X for Mobile, Standard does not. Both editions use the same Sophos Central console, the same enrollment methods and the same policy engine, so day-to-day administration is identical. The second difference is platform reach, because the Central Mobile Standard licence covers Android devices, iPhones, iPads, Macs and Windows computers, while ChromeOS management through Sophos Chrome Security belongs to the Intercept X for Mobile licence that Advanced contains. If you already run a separate mobile threat-defence product, Standard avoids paying for the same function twice.

Best antivirus? Why Windows Defender alone is not enough
Explains why device management and built-in protection are not the same thing as active threat protection, and where the gaps show up in daily operation.

Which limitations should you know before buying?

Sophos Central has no Swiss data region. You pick the region when the account is created, Germany and Ireland being the European options, and the choice cannot be changed afterwards, so it has to be decided before the first device is enrolled. Platform coverage is uneven: Chromebooks need the Intercept X for Mobile licence, and Windows management works on Windows Pro, Enterprise and Education but not on Windows Home, because Microsoft does not allow device management there. Two enrollment methods depend on how the hardware was purchased, since Android zero-touch requires devices bought from a Google-approved enterprise reseller and automated Apple enrollment requires devices bought through Apple Business or an authorised reseller, while devices already in use normally have to be factory reset first. The most common follow-up purchase is threat protection, because Standard manages devices but never scans them, and the former Sophos Secure Workspace and Sophos Secure Email container apps were withdrawn in December 2023, so separating business data now relies on the Android work profile and Apple User Enrollment instead.

What Does a VPN Protect Against and What Doesn't It? Debunking the Most Common Myths
Useful if you assume a VPN on company phones covers the web and phishing protection that Mobile Standard does not include.

Frequently asked questions about Sophos Central Mobile Standard Corporate

What happens to a private phone when the employee leaves?

On an Android Enterprise work profile device, the wipe action removes only the work profile and leaves the private part of the phone untouched. On a company-owned fully managed device, the same action resets the device to factory settings.

Which app do employees install to enroll a device?

Android devices, iPhones and iPads use the Sophos Mobile Control app, which is also the reason the old name still appears in searches. Macs and Windows computers do not need an app, because they are managed through the operating system's own MDM client.

Can it stop a non-compliant device from reading company email?

Yes. The Sophos Mobile EAS Proxy sits in front of Exchange ActiveSync and only forwards synchronisation requests from devices that satisfy your compliance policy, which is the usual way to keep an unenrolled or jailbroken phone out of the mailbox.