Sophos Network Extension Crashing on MacOS

Hi Sophos User6833,

Thanks for reaching out to the Sophos Community Forum. 

I suggest checking the status of system extensions by running the following command. 
- systemextensionsctl list 

There is some chance that a new version of the extension may have been loaded and the old one is waiting to be cleared. If you can provide the output you receive when running this command I may be able to advise further. 

A reboot may also help, but I suggest opening the Endpoint Self Help tool on one of the affected devices to see if there are any suggested actions present under the "Prerequisites" tab. 

Same problem here .... after updating computers from macOS 12.5.1 to 12.6 we have some computers with no problems and some with the message/status: "Not started: Sophos Network Extension".

Rebooting does not help and I do not see anywhere an option to reactivate the 'allow' for this extension.

Are any additional options available when opening the "Endpoint Self Help" tool via the Finder? I suggest checking the "Prerequisites" tab. 

Let me know what you see when running the following command.

Qoosh said:

- systemextensionsctl list 

In the security and privacy window, the option to allow this should appear as shown below.

Hello

This is the output of that command

➜  ~ sudo systemextensionsctl list 

Password:

2 extension(s)

--- com.apple.system_extension.network_extension

enabled active teamID bundleID (version) name [state]

* * 2H5GFH3774 com.sophos.endpoint.networkextension (10.4.0/7) networkextension [activated enabled]

--- com.apple.system_extension.endpoint_security

enabled active teamID bundleID (version) name [state]

* * 2H5GFH3774 com.sophos.endpoint.scanextension (10.4.0/7) com.sophos.endpoint.scanextension [activated enabled]

The perquisites tab says that the transparent proxy isn't running, clicking 'fix' doesn't seem to do anything. I'm quite certain everything is whitelisted properly on our MDM as a newly installed machine doesn't have any errors without any intervention. 

Hello

Sorry this might be a double post

output of the command

➜  ~ sudo systemextensionsctl list 

Password:

2 extension(s)

--- com.apple.system_extension.network_extension

enabled active teamID bundleID (version) name [state]

* * 2H5GFH3774 com.sophos.endpoint.networkextension (10.4.0/7) networkextension [activated enabled]

--- com.apple.system_extension.endpoint_security

enabled active teamID bundleID (version) name [state]

* * 2H5GFH3774 com.sophos.endpoint.scanextension (10.4.0/7) com.sophos.endpoint.scanextension [activated enabled]

There isn't an additional request for the extension in System Preferences

Hi Sophos User6833,

Thanks for the update. In that Security and Privacy window, please click the lock icon in the bottom left, and enter your Administrator password to unlock the settings.

Once unlocked, see if you'll have the "Allow" option. If you don’t, then click the Advanced button. In some cases, the Allow may show up in this Window.

Let me know how it goes.

same issue here, suggested answer did not help.

We seem to experience the same error. Is there a way to simply delete the extension and disable web-filtering completely?

The following recommended read article explains how to manually remove system extensions. 
- HOW TO: Remove System Extensions

When checking the Endpoint Self-Help tool and selecting "Fix" on any problematic extensions, what options are shown?