The MacOS Intercept X has some serious problems. (I'm running the latest EAP 10.3.0.)
The last update to Big Sur 11.16.1 went well, but then my first login after the update took 45 minutes to get to the point that all of my apps were up. Ridiculously slow. This was with the current non-EAP version.
Same with Monterey, using Intercept X EAP. It took 15 minutes to get from the login screen to my desktop, and then I went to bed it was taking so long for the applications to fully launch.
Right now, the networkextension is running at 200% CPU continuously, even when network traffic is low, so my fan is running continuously:
No. I did 2 or more reboots. It did not help. The only solution I found is uninstalling it. After that, everything works as expected. But no Endpoint Protection is not the answer ;-) The same is on 4 other…
I'm having the same issue too. Starting up from a cold boot takes forever to load to the desktop. If i use the power button to force shutdown and power it on again, it loads somewhat normal. This is not acceptable for our user experience. This happens on both Sophos Endpoint and Home Premium. This is reoccurring for me every morning, not just from post OS upgrade.
For the Sophos Central managed endpoint, I recommend signing up for the EAP for macOS. This will move you to version 10.3.0 of the NetworkExtension as well as the ScanExtension. The update is geared towards addressing many concerns with performance.
For the Home version, I was able to inquire internally and found that there’s an update that will finish rolling out today which includes many of the same fixes as the EAP for the Central managed AV.
If you were looking for specifics surrounding the Sophos Home client, it would be best to inquire with the Sophos Home team directly. If you continue to face issues with the Central managed AV, feel free to reach back out on this thread.
We are still experiencing this issue eve installed 10.3.0. Especially back from sleep mode. Chrome doesn’t start properly also. The computers without Sophos are running ok.
BTW. I just found my Sophos got upgraded to 10.3.1.
we have the same issue with Mac OS 12.0.1 running 10.3.1. A hard reboot corrected the issue (boot up was at the 1 hour mark). I moved the mac into the EAP for macOS.
Kushal Lakhan, is Sophos Intercept X 10.3 formal released? If not, when should we expect it becomes a formal release?
It looks like version 10.3 was released to all customers as of October 19th. The current/latest version available is 10.3.1.
You can find the latest release notes here.
Hi There. Any news about this issue. All our 4 Monterey MacBook Pros have the same issues. Installed Version is 10.3.1.It is extreme slow when you start your machine and open your apps. After 30 - 60 Minutes everything works as expected.What can we do?Cheers, Mike
Not sure it just work for my Macbook or others also, when this issue happens, restart the Mac again works.
No. I did 2 or more reboots. It did not help. The only solution I found is uninstalling it. After that, everything works as expected. But no Endpoint Protection is not the answer ;-) The same is on 4 other MacBook Pros in our lab. So it is not just me.
My iMac Pro 2017 is also suffering from this affliction, after upgrading to Monterey from Big Sur. Some days after I log in, it continues normally, on other days it takes an unknown time, as I don't wait but reboot one or more times which eventually allows me to work (so far). The iMac is on OS 12.1 with Sophos 10.3.1 with Endpoint Advanced and Intercept X, via the Central Managed Portal.
@Qoosh: Please could a fix be forthcoming in the not too distant future, as I need my iMac for work?
As of January 26th, version 10.3.2 of the Mac Endpoint will be released in to the EAP. This release is mainly aimed at improving CPU usage and build times with development applications, though you should see some improvements in other areas as well.
If you continue to experience issues with long login-times, I'd suggest turning off the "Cryptoguard" feature from Sophos Central first. If this does not yield positive results, you can turn the feature back on and instead turn off "Real-time Scanning" to try and narrow down the issue.
I suggest noting the difference in time it takes to perform an operation so that the issue can be better quantified to our support team.