My computer updated to macOS 11.2.1 yesterday and everything seemed fine, then Sophos updated from 10.0.2 to 10.0.3 early this morning. Since the Sophos update, my computer has been experiencing random network data loss. For instance, Microsoft Teams keeps disconnecting, web pages fail to load, etc. These usually only last less than 10 seconds each, but their frequency creates a very high level of frustration.
I noticed that for very long stretches of time (20minutes or more), the Sophos Network Extension is running at 150% CPU usage.
I have all of the components configured to start and I have been running the EAP successfully since the beginning of the program. Today, I had to remove it. The network stability blips and the increased laptop fan usage caused by the high cpu process was too much.
I don't understand the reasoning here. The Whole purpose of the EAP is to allow "customers to test the macOS features and functionality with macOS 11 Big Sur." By not patching the EAP, you are…
In my case, my VPN connection kept "randomly" disconnecting.My workaround was to remove my computer from EAP, run Sophos update and confirm downgrade to 10.0.1, then reenroll my computer in EAP, run Sophos update to get 10.0.3 but decline the Transparent Proxy request. Rock solid since then.
This works because you are not granting the Network Extension permission. This may be a workaround for some, but many organizations (such as my own) pre-approve that dialog and therefore cannot disable the feature.
It is also a temporary fix. After reboot, it automatically enables the transparent proxy.
I can confirm the exact situation at my end where Sophos is clashing with Zscaler ZPA (VPN like connection). On the previous version, the Web Network Extension was not enabled by restarts but since 10.0.3 we are in this situation... I had to provide my colleagues with the protection passwords so they can uninstall and then re-install back without the culprit. You can imagine the fun and comments on this.....