Intercept X Endpoint – Web Performance Optimization

The latest version of Sophos Intercept X Endpoint for Windows includes web performance optimization.

Important: Currently, once the device is running the latest version of the Sophos Endpoint software (Core Agent 2022.4.1) an additional action is required to enable the web performance optimization.

These enhancements will be enabled for all customers in the near future. In the meantime, if you are experiencing web performance challenges now, please follow the steps below.
 

• Step 1) Check the Sophos Endpoint software version
  
  Ensure that your Windows devices are running Core Agent version 2022.4.1 (or later) and are running the Windows 10 x64 operating system (or later). You can see this information in Sophos Central.
  
  • User Endpoints: Core Agent version 2022.4.1 has now been released to all customers.
  • Servers: Core Agent version 2022.4.1 is currently being released and is the rollout expected to complete mid-February. If you need the new version earlier, please contact Sophos Technical Support.
    Tip: Check that the ‘Controlled Updates’ feature in Sophos Central is not being used to pause endpoint product updates for your devices.
    
    

• Step 2) Request enablement of web performance optimization
  
  Currently, the ('web offload') update that provides the web performance optimization for Windows endpoints needs to be enabled for your Sophos Central account.
  
  This will be enabled automatically for all customers in the near future, however currently you’ll need to request this by opening a case with Sophos Technical Support. Please provide your Sophos Central unique ID with the request to enable 'web offload'. (this can be found in Sophos Central under Account Details > Sophos Support).
   

The new agent version, along with the web performance optimization, has successfully resolved challenges for many customers. However, if you continue to have performance concerns after completing the steps above, please open a case with Support for investigation.

FAQ:

What is this ‘feature’, and what performance concerns does this address?
This is an improvement to how the Sophos Endpoint agent for Windows processes web traffic when HTTPS decryption is not enabled. Sophos Endpoint performs a number of processing steps for all web traffic. This (‘web offload’) optimization significantly reduces the required steps after SophosLabs security checks and Web Control policy checks are complete. This improves general web browsing speed, large file download speed, and results from broadband speed test sites.

When will this be enabled for all customers?
We are currently targeting enablement for all customers by the end of April.

Are there any known issues with enabling this?
We are aware of an issue when using Cisco AnyConnect. This has been fixed in development and will be included in the next Core Agent release, after which we will roll out this web performance optimization to all customers, targeted to complete by the end of April. If you are using Cisco AnyConnect, Sophos Technical Support will be able to provide further guidance and access to an MR (Maintenance Release) version with the fix.

What are the recommendations for partners who handle a lot of clients?
To enable the optimizations, Sophos Technical Support will need to know the unique ID of each customer’s Sophos Central account. This information can be found in Sophos Central under Account Details > Sophos Support.