Loosing Network Connection on Mac since Endpoint Version 10.0.3

Jan, the issue you have reported here was reported by a number of other people as the latest iteration of Sophos for BigSur is clashing with various VPN's. I have the same thing on Zscaler and you can see other discussions on Cisco and so on. I was checking the discussion to see if there is any update on my issues and stumbled across your post and decided to post this response.

Dear Nicholas,

thanks for your reply and confirmation of the issue.

For me it seems, its not just interrupting the VPN. Today i am in the office and connected via LAN cable to the company LAN without VPN Client. If i call an internal webinterface thats routed to a different subnet inside the company by a Sophos UTM I loose my network connection for a short time.

I also contacted sophos support, but as this is an EAP they told me to write about my issue in this community.

Hi Jan, Sorry to hear about the issues you're seeing. I'm unable to find the SDU or command output, could you try sharing another way? Dropbox, OneDrive, or another file sharing system? We'll get someone to take a look at it as soon as we get it.

In the meantime, we can offer a workaround to disable the network extension. In Central amend, or create new, policies to disable:

• Threat Protection
  

  • • Real-time Scanning - Internet

      • Scan downloads in progress
      • Block access to malicious websites
    • Remediation
      • Enable threat case creation
    • Real time protection
      • Protect network traffic
• Web Control
  • Disable Web Control 

Once the features are disabled rebooting the machine will ensure the network extension is not loaded.

Dear David,

thanks for the workaround, I will check that.

I will send you a pm about the SDU output file.

The mentioned woraround works for our EAP clients.

We're on 10.0.4 and this workaround still causes the network extension to load and is destroying our productivity.

The workaround should prevent the extension from loading, are you able to send us an SDU and we can take a look and try to understand why it's not? Thank you

The extension still loads after those policies are updated to the above as I set the default policy for all users to that now.

509cabb4-8e8a-c4eb-d9d6-2a099b2a148b_2021-02-26-03-04-41.zip

8de7829b-db16-447f-1b75-4f61a3e5e66e_2021-02-26-03-04-09.zip

Thanks for the quick reply, it looks like the following setting is still enabled.

• Protect network traffic

Admittedly the instructions are a little inaccurate, that setting can be found here:

• Real time protection
  
  • Protect network traffic

Give that a go, and let me know if the extension still loads after a reboot.

I'll edit the instructions so they're clear for other users.

Thanks.  That did it!  Extension is gone after reboot.