Hello Vasileios Laios ,

We appreciate your reaching out to the Sophos Community Forum.

Install the hotfix on the device and test it to see if it works. If not, we must add the exclusion for exploitation under the protection policy. 
To install a hotfix for the specific user, please follow the steps.

Step 1:
Go to Central > Global Settings > Software packages > Select Windows Computer/Server > Add Software >  ef85902f-2fe4-5c93-aa39-432a5eb4faaa  > Save.

Step 2:
Go to Central > Endpoint Protection > Policies > Add Policy> Select the Update Management Policy from the drop-down menu> Continue> Add the users you want that Policy applied > Settings > Configure as required > Save. You can also clone the Policy and configure it accordingly.

Please refer to this article: https://support.sophos.com/support/s/article/KB-000038477?language=en_US.

For adding the exclusion, you can refer to this article: docs.sophos.com/.../index.html.

Regards, 

Hi Rutvik,

thank you very much for the answer. It has worked like a charm. If i can give you feedback, you have written everything very clearly. It was very easy to follow your instructions and the end result was exactly what i was looking for. 100% success! Thanks a lot!

Has the software package for this been updated? The package I have applied is FTS 2023.2.1.34-MR4. 

I am still unable to launch battle.net games with the above package. Thanks!

Hello Michael Zull ,

We appreciate your reaching out to the Sophos Community Forum.

So yes, this version has been updated. But make sure you choose the right one. 

Latest version: FTS 2023.2.1.35-MR5 (includes HitmanPro.Alert version 3.9.4.999), 
Release date: 5th of June 2024

• Windows Endpoint platform
  • Release notes: Sophos Intercept X FTS 2023.2.1.35-MR5
  • Platform Software Token: dfc7fed3-df13-5e54-b52e-ef3b9483733f
• Windows Server platform
  • Release notes: Sophos Intercept X FTS 2023.2.1.35-MR5
  • Platform Software Token: 034835fc-6774-5078-9fc7-5d258fbb015a

You can refer to this article: https://support.sophos.com/support/s/article/KB-000038477?language=en_US

If this didn’t help you. You can try to add the exploit mitigation exclusion in the central console. 

To create exploit mitigation exclusions, follow these steps:

1. Click "Add Exclusion" on the right side of the page.

2. In the "Exclusion Type" drop-down, select "Exploit Mitigation (Windows)".

3. A list of protected applications on your network will be displayed.

4. Select the application you want to exclude. You can click "Application not listed?".

5. Enter the file path of the application you want to exclude.

6. Under "Mitigations", you have two options: - Turn off "Protect Application" This means the selected application won't be checked for exploits. - Keep "Protect Application" turned on and select the exploit types you do or don't want to check for.

7. Click on "Add" or "Add Another".

8. The exclusion will be added to the list on the Global Exclusions page. 9. It's important to note that the exclusion only applies to servers that you assign this policy to.

For reference, you can refer to this article: https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/GlobalSettings/GlobalExclusions/ExploitExclusions/index.html.

Regards, 

Thanks for the reply. I updated the software package and also added the exclusions and still can't launch. I went through the overrides and it appears to be an exploit mitigation issue, when I reenable them it won't launch. I've attached a pic of the exclusions I have put in for playing Call of Duty launched from Battle.net, let me know if there is anything else I should try.

Thanks!