This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Latest pre-release of 10.11.4 breaks Sophos AV Home Edition

The problem that existed prior to the release of 9.4.1 is back with the latest version of El Capitan that has just been pre-released 10.11.4 Beta (15E27e). The Sophos icon remains dimmed in the menu bar with the error On-Access Scanning Is Disabled. Could someone in engineering please take a look at this?



This thread was automatically locked due to age.
  • No, I am unaware of that method. Turned it off in Sys Prefs. What is the command line, please?
  • I, too, have reported this to Apple engineering as a bug. I haven't heard anything back yet, but I would reiterate to anyone on this thread that if you've downloaded 10.11.4 and you're experiencing this problem, please use Feedback Assistant to let Apple know that they've broken something in this build. Working with them is a bit of a numbers game and if they hear from enough people, it will help get their attention faster.
  • JohnGillett said:
    No, I am unaware of that method. Turned it off in Sys Prefs. What is the command line, please?

    Reboot into Recovery (Cmd+R at the chime). In Utilities>Terminal enter "csrutil disable" and reboot. That will disable SIP and On-Access Scanning should work. Note that this is not a "solution" since Apple added SIP to El Capitan for security purposes and really should be enabled. Moreover, it's likely that any future beta will turn it back on by default. Also, csrutil has three arguments: disable, enable, and status. The first two will only work in Recovery. Status will also work in Terminal after booting normally.

  • In addition, clicking Update Now in the Sophos Menu does nothing.
  • SIP is not new in OS X 10.11.4 Beta 4, it has been there, and enabled, since OS X 10.11 (El Capitan) came out and Sophos on-access protection has been working fine with SIP enabled.

    I also reported the issue to Apple.
  • Thanks very much for the command (and your patience). Now have my Automatic Virus Protection on again.
  • Did turning off SIP fix the on-access protection for you?
  • ZRL1, good detective work! This did, in fact, solve the problem, or as you note, allow SAV Home to run until Sophos can figure out how to fix this correctly without having to compromise my Mac's security.

    How did you figure out that it was SIP that was causing the problem? It's a little puzzling that it's the problem since, as noted by VincentCina, SIP has been running in El Capitan since it was released.
  • VincentCina said:
    SIP is not new in OS X 10.11.4 Beta 4, it has been there, and enabled, since OS X 10.11 (El Capitan) came out and Sophos on-access protection has been working fine with SIP enabled...

    I'm aware of that and was using that trick to keep Sophos running back when El Capitan was first introduced until Sophos was made compatible. As Bob Cook pointed out, Apple has done something different in the most recent beta so turning off SIP is once again a temporary fix if the user needs to be running the latest El Cap version but also needs the protection Sophos provides.