We installed Sophos Intercept X on 75 computers on one client. Customer complains that internet browsing has been slow since then and downloads take a long time.
The issue is resolved when the "Protection against Network Threats" function is disabled, directly in Endpoint, I attach an image that shows this.
Has anyone here gone through this? Well, honestly, this is new to me and not even Sophos support here in Brazil knows exactly how to handle this.
Seeing the same thing here at my company. All of our mac clients on Intercept X are just fine (we are a 90% mac shop), but the few on PC are seeing their internet browsing throttled back to 10-20% of normal speed (our symmetrical Gb speed is typically 100-200 Mb on any PC). The interesting thing is that this is not happening with other apps that go across the WAN. Presto, our hight speed (UDP) file transfer server that our artists access across the WAN is experiencing no slowdown at all. The slowdown is only occurring with internet browsers (Chrome, Firefox, IE, etc..)
That makes sense as it’s only the traffic from browser processes subjected to web protection and control.
Network traffic from other processes is considered but not to the same degree. The SophosNetFilter.exe process,the child process of the sophosntpservice.exe is where the work takes place.
I would imagine that with ssl/tls inspection enabled in the threat protection policy it would have to be slower than without if you have that option enabled.
it is my understanding that the next release improves the speed and this is due next week sometime at least for the early groups.