Hi Abhimanyu,
"Recently, we deployed Sophos Intercept X Advanced for one of our customers. Now, they are facing system slowdowns. Could you please help me resolve this issue?
This thread was automatically locked due to age.
HI Vinay A S
Thank you for reaching out to Sophos Community.
Could you please send the screenshot of the CPU and the memory usage from the task manager when the slowdown occurs? Also, is the issue occurring at a particular time or at random?
Hello Vinay A S
We appreciate your reaching out to the Sophos Community Forum.
I appreciate the information, but I want some more information here. Does the device have an SSD or HDD? Sophos highly recommends SSD as the boot drive.
If you have an HDD, refer to this article: https://support.sophos.com/support/s/article/KB-000045001?language=en_US.
Please refer to this article for the system requirements of the product you installed on the device: https://support.sophos.com/support/s/article/KB-000045001?language=en_US.
Please note that the devices don't have any other 3rd party antivirus installed.
To investigate this further, I await a screenshot of the CPU utilization.
Regards,
Please find the attached screenshot for your reference and please do let me know how we can resolve this issue.
Please find the attached screenshot for your reference and please do let me know how we can resolve this issue.
That view isn't the best one in TaskManager without expanding at least one of the "Sophos Endpoint Defense Software" items it's hard to say for sure which is which process:
"Sophos System Protection" - SSPService.exe
and
"Sophos Endpoint Defense" - SEDService.exe
have the same description, so unless they are expanded it's hard to say for sure.
In later versions they are now "Service" and "Software" to differentiate as shown below but they used to both be "Software", which is what you have. This is the newer view:
I assume the one with higher memory is SSPService.exe though which makes sense if SophosFileScanner.exe is also using CPU.
For me this looks like Scanning is the first thing to focus on.
Create a CSV of what is being scanned as mentioned in the previous comment.
Thanks.