Sophos Endpoint Intercept X (Malicious Traffic Detection) slows down MacOS Monterey extremely

Hello,

Thank you for reaching out to the Sophos Community Forum.

Do you know if multiple network extensions are installed on the macOS devices in question? In some cases, having other network extensions installed prior to that of Sophos' can cause issues. 

I have reached out to you via PM to request logging information from one of the affected devices to look into the issue further. 

Hi Kushal,

I have the exact same problem running version 10.3.1 and Mac OS 12.1 on both my MacBooks, it’s impossible to use the computers with the “malicious traffic detection” setting on, when you turn it off the computer works fine

Thanks for reaching out. 

I have PM'd you to gather further details on this issue.

Thanks for reaching out. 

I have PM'd you to gather further details on this issue.

I'm having this same issue as well if you can help.

Hello Craig,

As an initial step, I'd recommend running the following command.
# systemextensionsctl list

The "network_extension" should report back with Version 10.3.0, "scanextension" should report back with 10.3.1.

Let me know if you see additional system extensions present when running the command.

Thanks! Yes, that what it shows (just the 2 with those versions). When I install Sophos, things run fine until I reboot. I'm not sure if that helps in any way.

Here is the listing for Sophos extensions"

com.sophos.endpoint.networkextension (10.2.2/223121) networkextension [activated enabled]

com.sophos.endpoint.scanextension (10.2.2/223121) com.sophos.endpoint.scanextension [activated enabled]

But the networkextension is bombing my CPU.  I force quitted it, but it eventually restarts.