Sophos Network Threat Detection is blocking Cypress automation tool

BUMP!

Our Developers (who already hate Sophos), are experiencing this issue too. There's more information on the Cypress GitHub: https://github.com/cypress-io/cypress/issues/14175

I will raise a case with Sophos, as it's clear it's not getting any traction here, and I can't afford to give our developers more ammo against Sophos; which according to them "slows down everyting!".

We all know that all AV slows down a machine, and I know that Sophos are working in the background to improve scanning etc, but any help from Sophos would be appreciated here.

Once I get the ticket number I will post it here for others to reference for a "me too"...

Thanks, 

John

This issue is actively being looked into by our development teams. A fix has not yet been found, but I will update you here if I see anything promising in the coming days. 

There will be an update which begins the release cycle on May 19th (completed on July 5th) that will affect network traffic interception and inspection, which is geared towards addressing some of the issues customers have been experiencing lately. That update will hopefully include some changes to address this issue as well. 

Could you please explain your release cycle? Do you mean that we will not see a fix for this until July 5th? We were told by your support person he would be trying to push for a hot fix? Please update. Having my IT admin have to log into my computer every 4 hours isn't exactly a solution I want to have to endure for the next month and a half.

I'm not able to confirm that the update will fix the issues with Cypress at this time. If that turns out to be the case I will let you know here. If the fix will be pushed out during this release cycle, I recommend opening a support case so that your site can be moved into one of the earlier release groups.

Others in the forum have mentioned that the "Electron Browser" does not run into this problem. 

Adrian Ling said:

I can confirm that the tests run fine if I use the electron browser, so that is one work around.

Another option would be to turn off the following components from Sophos Central so that the "Sophos Net Filter.exe" is no longer running on your local device. 

• Web Control (Web control policy)
• Scan downloads in progress (Threat Protection policy)
• Block access to malicious websites (Threat Protection policy)

I'm not able to confirm that the update will fix the issues with Cypress at this time. If that turns out to be the case I will let you know here. If the fix will be pushed out during this release cycle, I recommend opening a support case so that your site can be moved into one of the earlier release groups.

Others in the forum have mentioned that the "Electron Browser" does not run into this problem. 

Adrian Ling said:

I can confirm that the tests run fine if I use the electron browser, so that is one work around.

Another option would be to turn off the following components from Sophos Central so that the "Sophos Net Filter.exe" is no longer running on your local device. 

• Web Control (Web control policy)
• Scan downloads in progress (Threat Protection policy)
• Block access to malicious websites (Threat Protection policy)

Turning off

• Web Control (Web control policy)
• Scan downloads in progress (Threat Protection policy)
• Block access to malicious websites (Threat Protection policy)
  Does not work
  
  turning off Network threat protection via Sophos admin with tamper password works but isn't a good option .
  
  Any update on this?

Do you know if you've followed the same steps as mentioned in the following article? 
- Advisory: Sophos Central Endpoint - Issues with Cypress automation tool caused by Modern Web

This issue is still under investigation by our development team. Future updates and progress will be logged in this KBA as well.