I am new Sophos user. I want to make sure I am allowing all the necessary permissions in macOS 10.15 on installation of the Sophos installer. I allow the installer to run in System Preferences>Security and Privacy but am never prompted with a pop notification shown in the first image of this support article (included below as well): https://support.sophos.com/support/s/article/KB-000039014?language=en_US
I would prefer to not have to pull the necessary agents and helpers from the Sophos directory in /Library every time I install the endpoint software on a system. Is there a reason why I am not seeing the "Action Required" notification upon installation? Note: I have allowed notifications from Sophos in the notification preferences.
Thanks for any help you can offer
Please try adding the components manually, like shown in this video starting from 1:18: https://www.youtube.com/watch?v=5wOgAiy1kps&feature=emb_logo. Hope this is helpful.
By any chance are you able to install the endpoint successfully on the system? I'm suspecting that the reason as to why "required action" is not showing was due to mac kext permission issue.Can you applying this below steps. and let us know for the status.
Boot into macOS Recovery mode. Open Terminal. Run the command: /usr/sbin/spctl kext-consent add 2H5GFH3774 Reboot the affected Mac
Thank you so much for reaching out. I followed your instructions and ran that command from terminal in recovery mode. When I rebooted, I was still not prompted by the pop up notification that would allow me to finish authorization the OS permissions for Sophos. I did not notice any changes to the permissions settings under System Preferences>Privacy&Security.
I would happy to troubleshoot further if you have any other suggestions.
Even after providing the Kext permission if you are still seeing the issue, could you please confirm if the privacy setting has been configured successfully? Please check this link to confirm if the security permissions have been configured.
Here is the output I receive in terminal when entering the command you provided. This is on a test device that has had the Kext permission entered via terminal in recovery mode. Please let me know if there is any other information I can provide.
Thanks so much!
Not Logged in
Thank you for sharing the screenshot. It would be great if you can share a screenshot of the Sophos files present in System Preferences > Security and Privacy > Privacy > Full Disk Access along with the output of the following command - kextstat | grep -v com.apple
Community Team Lead, Support & Services| Sophos Technical Support Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts If a post solves your question use the 'Verify Answer' button.
Thanks for looking into this. I believe these are are the screenshots you are looking for.
Thank you for the screenshots! From the terminal output, it seems that Sophos Kexts are loaded into the system. However, Sophos does not have the full disk access permission as it does not have a checkmark next to it (as seen from the 1st screenshot).
I'd recommend you to check the "Sophos Scan" option and check any other Sophos entry present there. For reference, in my device, the following options are checked: Sophos Diagnostic Utility, SophosScanAgent, Sophos Endpoint UIServer, SophosCleanD, and, SophosServiceManager. (see the image below for reference.)
Thank you so much for your continued attention to this issue! The issue I am experiencing is that I do not see all of the Sophos options that you see and that are checked off in System Preferences>Security&Privacy on your device.
After I install Sophos on my test device, I do not see any options or maybe only one option after a few minutes.
I would like for all of the Sophos options to appear after I install Sophos so I can check them off and then hand the device off to the end user without worrying about whether or not Sophos is working properly or whether the end user will check off the options when they get the prompt to do so.
I hope that makes sense. Please let me know if I can explain anything better. Is what I am asking for possible?
I'm having a similar problem where all of the checkboxes are checked, and I've done both the drag and drop from the notification prompt and the individual app drag and drop from the Library folder. Nothing works the pop up continues (often too) to jump up.
Which version of Sophos Endpoint are you using?