This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Pop up Notifications to Complete Privacy and Security Permissions on macOS

I am new Sophos user. I want to make sure I am allowing all the necessary permissions in macOS 10.15 on installation of the Sophos installer. I allow the installer to run in System Preferences>Security and Privacy but am never prompted with a pop notification shown in the first image of this support article (included below as well): https://support.sophos.com/support/s/article/KB-000039014?language=en_US

I would prefer to not have to pull the necessary agents and helpers from the Sophos directory in /Library every time I install the endpoint software on a system. Is there a reason why I am not seeing the "Action Required" notification upon installation? Note: I have allowed notifications from Sophos in the notification preferences.


Thanks for any help you can offer



This thread was automatically locked due to age.
  • Hi ,

    By any chance are you able to install the endpoint successfully on the system? I'm suspecting that the reason as to why "required action" is not showing was due to mac kext permission issue.
    Can you applying this below steps. and let us know for the status.


    Boot into macOS Recovery mode.
    Open Terminal.
    Run the command: /usr/sbin/spctl kext-consent add 2H5GFH3774
    Reboot the affected Mac

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hi GlennSen,

    Thank you so much for reaching out. I followed your instructions and ran that command from terminal in recovery mode. When I rebooted, I was still not prompted by the pop up notification that would allow me to finish authorization the OS permissions for Sophos. I did not notice any changes to the permissions settings under System Preferences>Privacy&Security.

    I would happy to troubleshoot further if you have any other suggestions.

    Thanks again!

    chrome
    chrome
  • Hi 

    Even after providing the Kext permission if you are still seeing the issue, could you please confirm if the privacy setting has been configured successfully? Please check this link to confirm if the security permissions have been configured. 

    Shweta

    Community Support Engineer | Sophos Technical Support
    Are you a Sophos Partner? | Product Documentation@SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
    The New Home of Sophos Support Videos! - Visit Sophos Techvids
  • Hi Shweta,

    Here is the output I receive in terminal when entering the command you provided. This is on a test device that has had the Kext permission entered via terminal in recovery mode. Please let me know if there is any other information I can provide.

    Thanks so much!

    chrome
    chrome
  • Hi

    Thank you for sharing the screenshot. It would be great if you can share a screenshot of the Sophos files present in System Preferences > Security and Privacy > Privacy > Full Disk Access along with the output of the following command - kextstat | grep -v com.apple 

    Thanks,
    Yashraj Singha
    Manager | Global Community Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hi Yashraj,

    Thanks for looking into this. I believe these are are the screenshots you are looking for.

    chrome
    chrome
  • Hi ,

    Thank you for the screenshots! From the terminal output, it seems that Sophos Kexts are loaded into the system. However, Sophos does not have the full disk access permission as it does not have a checkmark next to it (as seen from the 1st screenshot). 

    I'd recommend you to check the "Sophos Scan" option and check any other Sophos entry present there. For reference, in my device, the following options are checked: Sophos Diagnostic Utility, SophosScanAgent, Sophos Endpoint UIServer, SophosCleanD, and, SophosServiceManager. (see the image below for reference.)

    Thanks,
    Yashraj Singha
    Manager | Global Community Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hi Yashraj,

    Thank you so much for your continued attention to this issue! The issue I am experiencing is that I do not see all of the Sophos options that you see and that are checked off in System Preferences>Security&Privacy on your device.

    After I install Sophos on my test device, I do not see any options or maybe only one option after a few minutes.

    I would like for all of the Sophos options to appear after I install Sophos so I can check them off and then hand the device off to the end user without worrying about whether or not Sophos is working properly or whether the end user will check off the options when they get the prompt to do so.

    I hope that makes sense. Please let me know if I can explain anything better. Is what I am asking for possible?

    chrome
    chrome
  • I'm having a similar problem where all of the checkboxes are checked, and I've done both the drag and drop from the notification prompt and the individual app drag and drop from the Library folder. Nothing works the pop up continues (often too) to jump up. 

  • Which version of Sophos Endpoint are you using?