We've started this thread to collect and collate the details on the occurrences of this on 10.0.4 and as a place to post your SDUs.
We still believe that network connectivity issues and the high CPU are unrelated as the Network Extension app is not directly involved in network activity, as it behaves as a watcher to the actual network extension which is what performs the actual interception.
Thank you for your continued feedback and your patience.
I am still experiencing this on multiple systems. I don't see a way to include an SDU on this post so I am oping a support ticket.
I have 1 Big Sur user with 2018 Macbook Pro 15" on MacOS 11.2.3 who is on Sophos 1.0.4, reporting com.sophos.endpoint.networkextension using 100% CPU (an entire core). Symptoms are:
It’s been happening every few days now.
Problem returns after force quitting com.sophos.endpoint.networkextension, and then seems to get process com.cisco.anyconnect.macos.acsosc... involved with high CPU usage, though, Anyconnect was not being used at the time.
I will open a support ticket. Note that we are evaluating JAMF Protect going forward, as it is integrated with our JAMF MDM, uses native MacOS functionality, and hopefully won't be as unstable as Sophos, while providing more actionable information.
Thanks for opening a Support ticket. We have been working with other customers on similar issues - there's a problem we've been encountering with Cisco AnyConnect and the team has been hard at work on improving this. We're hoping improvements will be seen in the upcoming ARM Support EAP.