We have starting rolling out new versions of the clients in the Early Access Program. Immediately after the client has been updated, it may show "Bad Health State". This is a known issue and has been updated in the Known Issues List.
Known Issues List for AMSI and IPS EAP - 2019-12-03.pdf
Versions
- Core Agent: 2.5.4 BETA
- Sophos AMSI: 1.0.1503
Changes
The following issues have been fixed for AMSI:
- Application Control identities blocking in the AMSI scan context. Note that .NET assemblies are still scanned. This will be activated again at a later point.
- AMSI allows standard user to delete arbitrary registry keys.
Note that no fix has been included for the IPS issue with wireless adapters.