Thread Info
  • State Not Answered
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 17 replies
  • Subscribers 18 subscribers
  • Views 5265 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Big Sur system updates slow down with Sophos Endpoint

mickl089

Hey guys,

Sophos Endpoint slows down the system update tremendously, can you observe the same? Do you have a solution for this?
Big Sur 11.3 or 11.3.1 to 11.4 / Sophos Endpoint 10.0.4 or 10.1.0 / same results. Deleting Sophos speeds up the system update.

Thanks in advance,
Michael



This thread was automatically locked due to age.
  • 0 in reply to Yashraj S

    10.1.4 was automatically updated to a couple of weeks ago. I can't remember if that was before or after the update in question.

  • 0 in reply to Brian1941

    I updated last night, and while I had to step away from the computer during the last part of it, things went fairly fast with the Admin Login and turning everything off in Intercept X. At 6:22 pm it said 15 minutes remaining and at 6:41 it restarted -- not off by much in the estimate. There were (at least) two restarts and I forgot to record when the second one happened and didn't get back until everything had finished.

    So it seemed pretty normal. Again, this was 10.1.4 and I'd gone into Admin Login and checked the box to override and then turned all of the switches off. I'll try the other laptop without the Admin Login step to see if this is due to 10.1.4 or also requires turning stuff off.

  • 0 in reply to Yashraj S

    I see the same behavior applying 11.6 and running the latest endpoint software10.1.4. Disabling Sophos shouldn't have to be the solution.  Even with all of the client settings disabled (real tine scanning, runtime protection, user controls) com.sophos.endpoint.scanextenstion is hovering between 30-50% CPU.  

  • 0 in reply to Yashraj S

    This has been going on for months on every Mac model we have. We found a workaround by booting computers to Safe Boot then installing the available updates. This is not a good solution and need a fix. Is there a way to temporarily disable on-access scanning through terminal then run updates? I'm looking at a way to use jamf to get the updates installed in a timely manner. My current test, brand new Macbook Air M1 has been trying to install updates for 7 hours now.

  • 0 in reply to Pat Servedio

    Hello Pat, 

    If you’re experiencing significant delays when performing OS updates, I recommend enrolling the affected devices in the new EAP program for macOS. One of the changes mentioned in the KBA linked below advises that improvements have been made to CPU usage when performing macOS updates. 
    - Welcome to the New macOS Endpoint Protection Features EAP

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • 0 in reply to Qoosh

    Hi Kushal,

    Thanks for the suggestion. It looks promising. I will start testing tomorrow. 

  • 0 in reply to Qoosh

    I updates to 11.6.1, not thinking about it, and the upgrade went well. But starting up all of my apps after the reboot took a half hour. So there are much more serious problems than just the upgrade process and than Monterey.

Unfiltered HTML