This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MacOS slowdowns with EAP in Monterey (solved) and extremely slow login with both Big Sur and Monterey

The MacOS Intercept X has some serious problems. (I'm running the latest EAP 10.3.0.)

The last update to Big Sur 11.16.1 went well, but then my first login after the update took 45 minutes to get to the point that all of my apps were up. Ridiculously slow. This was with the current non-EAP version.

Same with Monterey, using Intercept X EAP. It took 15 minutes to get from the login screen to my desktop, and then I went to bed it was taking so long for the applications to fully launch.

Right now, the networkextension is running at 200% CPU continuously, even when network traffic is low, so my fan is running continuously:



This thread was automatically locked due to age.
Parents
  • I'm having the same issue too.  Starting up from a cold boot takes forever to load to the desktop.  If i use the power button to force shutdown and power it on again, it loads somewhat normal.  This is not acceptable for our user experience.  This happens on both Sophos Endpoint and Home Premium.  This is reoccurring for me every morning, not just from post OS upgrade.

  • Hello Jack,

    For the Sophos Central managed endpoint, I recommend signing up for the EAP for macOS. This will move you to version 10.3.0 of the NetworkExtension as well as the ScanExtension. The update is geared towards addressing many concerns with performance.

    For the Home version, I was able to inquire internally and found that there’s an update that will finish rolling out today which includes many of the same fixes as the EAP for the Central managed AV. 

    If you were looking for specifics surrounding the Sophos Home client, it would be best to inquire with the Sophos Home team directly. If you continue to face issues with the Central managed AV, feel free to reach back out on this thread.

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • we have the same issue with Mac OS 12.0.1 running 10.3.1. A hard reboot corrected the issue (boot up was at the 1 hour mark). I moved the mac into the EAP for macOS.

  • , is Sophos Intercept X 10.3 formal released? If not, when should we expect it becomes a formal release?

  • It looks like version 10.3 was released to all customers as of October 19th. The current/latest version available is 10.3.1.

    You can find the latest release notes here.

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hi There. Any news about this issue. All our 4 Monterey MacBook Pros have the same issues. Installed Version is 10.3.1.

    It is extreme slow when you start your machine and open your apps. After 30 - 60 Minutes everything works as expected.
    What can we do?

    Cheers, Mike

  • Not sure it just work for my Macbook or others also, when this issue happens, restart the Mac again works.

  • No. I did 2 or more reboots. It did not help. The only solution I found is uninstalling it. After that, everything works as expected. But no Endpoint Protection is not the answer ;-) The same is on 4 other MacBook Pros in our lab. So it is not just me.

  • My iMac Pro 2017 is also suffering from this affliction, after upgrading to Monterey from Big Sur. Some days after I log in, it continues normally, on other days it takes an unknown time, as I don't wait but reboot one or more times which eventually allows me to work (so far). The iMac is on OS 12.1 with Sophos 10.3.1 with Endpoint Advanced and Intercept X, via the Central Managed Portal.

    @Qoosh: Please could a fix be forthcoming in the not too distant future, as I need my iMac for work?

  • We have a lot of user complaining about extreme long boot times and crashes during boot. Our users are running MacOS Big Sur or Monterey (multiple patch-levels)
    After removing Sophos 10.3.1 the boot problems are resolved.

    Is there any update ont these problems?

  • We are seeing the same. I've had the machines signed up for the macOS EA program, but that didn't help either. We've started uninstalling Sophos Endpoint 10.3.1 from affected machines and moving them to a different vendor to fix the problem.

  • As of January 26th, version 10.3.2 of the Mac Endpoint will be released in to the EAP. This release is mainly aimed at improving CPU usage and build times with development applications, though you should see some improvements in other areas as well.

    If you continue to experience issues with long login-times, I'd suggest turning off the "Cryptoguard" feature from Sophos Central first. If this does not yield positive results, you can turn the feature back on and instead turn off "Real-time Scanning" to try and narrow down the issue. 

    I suggest noting the difference in time it takes to perform an operation so that the issue can be better quantified to our support team. 

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Reply
  • As of January 26th, version 10.3.2 of the Mac Endpoint will be released in to the EAP. This release is mainly aimed at improving CPU usage and build times with development applications, though you should see some improvements in other areas as well.

    If you continue to experience issues with long login-times, I'd suggest turning off the "Cryptoguard" feature from Sophos Central first. If this does not yield positive results, you can turn the feature back on and instead turn off "Real-time Scanning" to try and narrow down the issue. 

    I suggest noting the difference in time it takes to perform an operation so that the issue can be better quantified to our support team. 

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Children