Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 70 replies
  • Answers 2 answers
  • Subscribers 22 subscribers
  • Views 301355 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Latest pre-release of 10.11.4 breaks Sophos AV Home Edition

bocaboy

The problem that existed prior to the release of 9.4.1 is back with the latest version of El Capitan that has just been pre-released 10.11.4 Beta (15E27e). The Sophos icon remains dimmed in the menu bar with the error On-Access Scanning Is Disabled. Could someone in engineering please take a look at this?



This thread was automatically locked due to age.
  • 0 in reply to bocaboy

    bocaboy said:
    Yep, I discovered the same thing, e.g., SIP didn't get re-enabled...

    ...I totally understand your thinking about waiting until tomorrow, but I was curious to see what would happen...

    My point was the advice to Julia.

    We've been down this road before but my original advice, which you quoted to Julia, might have led her to assume that SIP would be reactivated with the new beta (and the release?) of 10.11.4. SIP being active is an important security feature and, unlike the Sophos logo which goes gray when On-Access scanning is off (an excellent interface feature), there's no way of telling SIP's status without checking in Terminal. Waiting until tomorrow's release of Sophos 9.4.2 would fix at least the On-Access scanning issue without tinkering with SIP. Moreover, her issue might or might not be solved with 9.4.2 but with SIP off, we and she would never know and the security benefits of SIP would be lost.

  • 0
    Sophos released 9.4.2 today of Sophos Anti-Virus Home Edition and it seems to be running fine with the latest beta build of OS X 10.11.4 build 15E39d. I've re-enabled SIP and everything is back to normal.
  • 0 in reply to bocaboy
    My Sophos Home v1.1.1 is also back to running successfully with the new beta 15E39d after re-enabling SIP.
  • 0 in reply to JohnGillett
    John, I noticed that yesterday, when the latest build of 10.11.4 was released, this problem was solved. I think Apple also resolved whatever was causing this problem because the update for 1.1.1 of Home hasn't yet been released and won't be until later this month.
  • 0 in reply to bocaboy
    Agreed. My new beta didn't come in until this morning (10 Feb) so my reply lagged behind yours. Nice to have that back working again the 'proper' way.
  • 0
    I received an e-mail today from Apple engineering regarding this issue since it was originally submitted to them as a bug. They acknowledged the problem and believe it has been fixed in the latest pre-release build 15E39d. As I said in a previous post, the combination of Apple fixing the issue on their side and Sophos addressing it on theirs will hopefully put this to bed once and for all.

    Two special shout-outs: first to ZRL1 who came up with the temporary fix. Very inventive and great detective work! Second, many thanks to Bob Cook from Sophos who kept everyone in the loop as to the permanent fix. Thanks, Bob!
  • 0 in reply to bocaboy
    I can confirm the fix(s) worked. OS X 10.11.4 Beta (15E39d) and Sophos Home V1.1.1 for Mac is now fully operational.
  • 0 in reply to ZRL1

    I'm coming to this a bit late. I'm on El Capitan 10.11.6 and I too have a greyed out menu item for Sophos and "On-Access Scanning is disabled" still showing up. What can I do to get it working again?

  • 0 in reply to SharonBaker

    SharonBaker said:

    I'm coming to this a bit late. I'm on El Capitan 10.11.6 and I too have a greyed out menu item for Sophos and "On-Access Scanning is disabled" still showing up. What can I do to get it working again?

    First, have you tried opening Preferences in Sophos and trying to turn on On-Access scanning there?

    Second, which version of Sophos do you currently have (About Sophos Anti-Virus in the dropdown menu in the Shield)?

    Third, also in that menu, try "Update Now" and see if that helps.

  • 0 in reply to ZRL1

    Hello and thank you for responding. I cannot do what you ask because I don't have that ability. See below.

    • "Update Now" is greyed out (as seen in the menu screenshot)
    • If I click on any of the available clickable menu items (seen in the screenshot), no windows open and nothing happens (with the exception of two things "About..." (see screenshot) and "Show AutoUpdate Window" which just shows a progress bar with no progress.
    • Regarding the "About" screenshot, that is just WEIRD. I don't know why it says it's an unknown version and shows null for threat detection engine, etc. (this said that even before I tried to do anything, like uninstalling or reinstalling)

    After all this, I thought that maybe I should uninstall what I had and reinstall. I went to my Applications folder and found a Sophos App, maybe it was called Sophos Home, I can't remember now. I tried to open it, but nothing would really happen. It would attempt to open, but there was nothing to see within the app. I decided to just delete it, but I don't remember if I deleted before I went to find the installer or after. To download the installer, I remembered that I had login to the Sophos website. So logged in to Sophos Home Dashboard  (which was very confusing to find on your website by the way... At first I was confused by the Sophos ID which was different...) and under the Alerts section, it said something about not having been updated in a while, so I clicked on that (expecting that would help me somehow) and I went back to my Sophos menu item and nothing had changed. I still couldn't do anything. So I tried to look in other areas of the Dashboard to see if I could find a download to reinstall, and nothing. Oh, one more thing, after I decided to delete the Sophos app that was in my Applications folder, I thought the Sophos menu item would disappear and I could start from scratch, but no. I restarted after I deleted the app and the Sophos menu item still shows up, showing the same information it did before the removal of said application. Interestingly enough, I went to my trash to see if the app was still there from when I deleted it (because I haven't emptied my trash) and it's not even there, which is very weird... I'm very confused about how this app works. It's kind of making me suspicious...

    Mind you, I still cannot find a download to do a reinstall, and I gave up trying anything so I looked to see if anyone else had similar issues and found a few threads. I decided to respond to this one.

    P.S. To Sophos Staff, I did a search on my computer for any files with text 'Sophos' and found some .plist and .bom files and a .log file. If you need it, please give me a place where I can send them to you. I don't want to post them here.

Unfiltered HTML