Create USB boot device from ISO blocked

Hi all,

we are in the process of moving from the classical Sophos Endpoint Protection and Enterprise Console to Intercept X with EDR and Sophos Central. We have just rolled out on a few test machines and we cannot figure out how to allow the creation of a USB boot device. We already disable everything in the threat protection policy but still Sophos is blocking files on the client while the ISO is copied to the USB drive. Even simple txt files that are included with the ISO are being blocked. However we can just copy txt files directly to the USB drive without any problems. I'd be glad if someone could give me a hint on how to solve this. Btw: We are using Rufus for creation of the USB boot device. Any help is greatly appreciated.

Thanks
Daniel

PS: Alerts for the blocked files in this case are only displayed on the client and not visible in Central.