This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to Start Scan - Intercept X with EDR & XDR


I am unable to manually start a scan on the endpoint. Windows 11 I click scan nothing happens.

Any advice?

Thank you,


This thread was automatically locked due to age.
  • Hi  ,

    Thank you for reaching out to the Sophos Community Forum.

    What is the endpoint version running on this device? Were there any recent updates or events prior to this behavior? Some changes would generally require a reboot to initialize the endpoint components.

    If a reboot doesn't help, we can start looking into the Sophos UI logs (C:\ProgramData\Sophos\Sophos UI\logs\SophosUI.Net.log) or MCSAgent log (C:\ProgramData\Sophos\Management Communications System\Endpoint\Logs\McsAgent.log), to find more details of what could be causing this.

    Gladys Reyes
    Global Community Support Engineer
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • "C:\ProgramData\Sophos\Sophos UI\Logs\SophosUI.Net.log"
    "C:\ProgramData\Sophos\Endpoint Defense\Logs\SophosScanCoordinator.log"

    would be worth checking.  Thanks