Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 15 subscribers
  • Views 3575 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No internet access until we use captive portal mode

Hamid Karimi

We have Sophos Central Endpoint Protection for macOS installed on 50+ laptops and a few computers a day lose internet. We try to turn wifi on/off, and different browsers and it doesn't work.

Oddly though if we launch Sophos Endpoint Self Help and disable the Captive Portal Mode then the internet works, for 5 minutes, until captive portal protection re-enables. Rebooting will make this go away for some time. 

Our WiFi does not have a captive portal, it is a simple WPA2 password. The vast majority of laptops are connected to the WiFi without issue.

1. Is there some setting to make this happen less often?

2. Can we relax browser protection with a set of trusted WiFis?

3. Can we set the Captive Portal Mode for a few hours?

Typical system info:

Operating System Version: macOS (13.3)
Proxy Configuration: No proxy configured in policy

Version: 10.4.7

Endpoint Advanced: Installed
Sophos Intercept X: Installed
Device Encryption: Installed



This thread was automatically locked due to age.
Parents
  • 0

    I have the same problem. Seems to only happen to Intel macs. 

    Highly correlated with VPN users who disconnect/reconnect. 

    I think Sophos is mis-handling DNS, because it is also binding the wrong DNS routing sometimes as well. There's a bug here and it's been pulling-teeth to get someone's attention at Sophos without being stuck in Level 1 canned-response stasis. 

Reply
  • 0

    I have the same problem. Seems to only happen to Intel macs. 

    Highly correlated with VPN users who disconnect/reconnect. 

    I think Sophos is mis-handling DNS, because it is also binding the wrong DNS routing sometimes as well. There's a bug here and it's been pulling-teeth to get someone's attention at Sophos without being stuck in Level 1 canned-response stasis. 

Children
  • 0 in reply to cbae

    +1 to the Intel Macs. Of the ~10 machines that have had this issue most were Intel Macs.

    We aren't using VPNs but still have this issue.

    Also I reached out to support and sent over the tcdump as well as the Sophos Diagnostic Utility zip file from the Sophos Endpoint Self Help. Will keep you posted if that finds something new.

    And I do think it has something to do with browser internet and possibly DNS. When it happens I can keep talking on Zoom but my browsers all display no internet.

Unfiltered HTML