we have installed last week the Lockdown for our windows 2012 & 2016 server.
Now we can't installed any updates from our WSUS Server like Defender Updates.
What exactly we need to do that Updates from WSUS are allowed?
Personally I would'nt expect the info of disabling Defender before or after Intercept-X installation in a KB about lockdown.
And just to repeat, this is not a Sophos issue, it is a Microsoft design…