This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos EP Linux creates sophos-spl-network user on some machines


since a view Days my monitoring alarms me that a user named sophos-spl-network is created. This happend not on all my machines.

Why is this happens ?

And - more interesting - is this a feature from Sophos?



This thread was automatically locked due to age.
  • Hi Sophos User6351,

    Thanks for reaching out to the Sophos Community Forum. 

    In the latest release of Sophos Protection Linux 2023.2 the service account "sophos-spl-network" will be removed. If some of your devices do still have this user account. I suggest checking the following log "/opt/sophos-spl/logs/base/suldownloader.log" to verify that the system is updating correctly. 

    You can also check the version that's installed currently from Sophos Central. If you were to run the following command locally, you will see "SPL-Base-Component:" for the latest version. 
    - /opt/sophos-spl/bin/version

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • Hi,

    I checked versions via central and it looks good. Seems that the Distriubution of the new Version was not happend in a close timeframe in my installations so my aide reports different changes.


    Tobias Fischer