we have installed last week the Lockdown for our windows 2012 & 2016 server.
Now we can't installed any updates from our WSUS Server like Defender Updates.
What exactly we need to do that Updates from WSUS are allowed?
Personally I would'nt expect the info of disabling Defender before or after Intercept-X installation in a KB about lockdown.
And just to repeat, this is not a Sophos issue, it is a Microsoft design…
If you wish to investigate the issue with your Server Roles further, I recommend opening a support case with our team.
In the meantime, I will reach out to our documentation teams to see if we can update the Server Lockdown FAQ with some information regarding Windows Defender.