Reflexion will be End-of-life on March 31,2023. See Sophos Reflexion EoL FAQs to learn more.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Network Extension Crashing on MacOS

We've been using Sophos with our macos fleet and have lately realized the network extension seems to be crashing a lot on macos monterey devices , and it'll bring the whole network stack with it. 

Anyone else observing similar behaviour? Any recommendations anyone has for circumventing the issues? I'm having a hard time even finding any logs for the network extension itself, but have just noticed a common theme of the users having this issue also indicating the extension is marked as not running when looking at the sophos controls on their machine.

This thread was automatically locked due to age.
  • Same problem here .... after updating computers from macOS 12.5.1 to 12.6 we have some computers with no problems and some with the message/status: "Not started: Sophos Network Extension".

    Rebooting does not help and I do not see anywhere an option to reactivate the 'allow' for this extension.

  • Are any additional options available when opening the "Endpoint Self Help" tool via the Finder? I suggest checking the "Prerequisites" tab. 

    Let me know what you see when running the following command.

    - systemextensionsctl list 

    In the security and privacy window, the option to allow this should appear as shown below.

    Kushal Lakhan
    Global Community Support Engineer
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hello

    Sorry this might be a double post

    output of the command

      ~ sudo systemextensionsctl list 


    2 extension(s)


    enabled active teamID bundleID (version) name [state]

    * * 2H5GFH3774 com.sophos.endpoint.networkextension (10.4.0/7) networkextension [activated enabled]


    enabled active teamID bundleID (version) name [state]

    * * 2H5GFH3774 com.sophos.endpoint.scanextension (10.4.0/7) com.sophos.endpoint.scanextension [activated enabled]

    There isn't an additional request for the extension in System Preferences

  • Hi ,

    Thanks for the update. In that Security and Privacy window, please click the lock icon in the bottom left, and enter your Administrator password to unlock the settings.

    Once unlocked, see if you'll have the "Allow" option. If you don’t, then click the Advanced button. In some cases, the Allow may show up in this Window.

    Let me know how it goes.

    Gladys Reyes
    Global Community Support Engineer
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Reply Children
No Data