Sophos Endpoint and Apple macOS 11 Big Sur

Our Endpoint Protection does not yet support macOS 11 (Big Sur). Please do not upgrade until we announce that we support it. We plan to have an Early Access Program (EAP) available soon so that you can test it on your own machines.
Apple will release macOS 11 on the 12th November, we plan to create an EAP in Central to test this release soon, but do not support it yet.

Central Device Encryption (CDE) for Mac version 1.5.3 does support macOS 11, this was rolled out recently but bear in mind that if you use both Endpoint and CDE you will still need to wait before upgrading to macOS 11.

On-premise customers will also get a version of endpoint protection that is supported on macOS 11 but will not have access to an EAP or Preview ahead of full support.

ARM-based CPUs are not currently supported. They require macOS 11 and additional testing and requirements. Sophos will support ARM-based CPUs, however, the details of that support will be provided at a later date.


Please check this KBA for up to date information: https://support.sophos.com/support/s/article/KB-000039501?language=en_US


Link to the Big Sur EAP on the Sophos Community



included info for Big Sur EAP
[edited by: FloSupport at 9:50 PM (GMT -8) on 2 Dec 2020]
Parents
  • If any customers can still not see the EAP this is most likely because your account uses MSP Connect Flex licensing (an arrears based usage license that is billed monthly via an MSP). We do not support EAPs for this type of license.
    If you know the URL you will be able to see the EAP area but this would not normally be available to you. If you click on the right-hand drop-down menu next to help you will find you do not have an entry for "Early Access Programs".
  • We are investigating opening an EAP just for MSP Flex customers, I'll update this thread when I know more. For background, MSP Flex customers do not have access to EAPs due to the way that usage is tracked and billed. We are now looking to create an EAP that works a little differently in the backend so that billing is not affected by EAP use.

  • investigating? i seriously cannot tell my clients to stop updating to Big Sur or buy any new MacOS device the coming months because they won't be protected by their Sophos Endpoint protection solution. Would be great if we get an EAP for FLex or an invitation code for now...

  • you have to ... I instructed an update stop for my clients. now I take better the next flight to an island.  far far away from the upcoming .. storm 

  • you have to ... I instructed an update stop for my clients. now I take better the next flight to an island.  far far away from the upcoming .. storm 

    Not sure, but maybe it would actually be nice to escape to a nice desert tropical island? ;) 

    For what it's worth, at this time I can say from the test I did this morning the current EAP doesn't seem to be working on M1. 

  • The current EAP is not for M1 (ARM) powered devices, as noted in the KB. 

    That said, it is possible to get it running on an M1, but you must enable Rosetta-2 from Apple, which is not enabled by default. Please note that this is not tested nor designed for the M1. A later release will bring proper support for the platform.

  • I've read the KB and off course I'm not testing on production machines, so there is no real urgency for me.

    However I'm stating I could NOT get the current EAP of Endpoint working on a brand new M1 Macbook Air. That is with Rosetta 2 activated (it will trigger its install the minute it is faced with Intel code). So my question is, do you guys have an M1 Mac available to you and have you tested this to work? In other words, is the statement the EAP version should work on M1 devices based on experience or theory? 

    I'm not trying to be pedantic or a pain. Nor am I expecting real support at this stage. Just want to see if this can be made to work.

Reply
  • I've read the KB and off course I'm not testing on production machines, so there is no real urgency for me.

    However I'm stating I could NOT get the current EAP of Endpoint working on a brand new M1 Macbook Air. That is with Rosetta 2 activated (it will trigger its install the minute it is faced with Intel code). So my question is, do you guys have an M1 Mac available to you and have you tested this to work? In other words, is the statement the EAP version should work on M1 devices based on experience or theory? 

    I'm not trying to be pedantic or a pain. Nor am I expecting real support at this stage. Just want to see if this can be made to work.

Children