Sophos Endpoint and Apple macOS 11 Big Sur

We need a definitive page with ALL the information for Security & Privacy Settings in order to create a functioning Configuration Profile. We CANNOT be searching through several postings to try and come up with the proper list of items. Support has been ridiculously terrible for Big Sur. GET ON IT! We are in the weeds here!

Hi Matthew,

Please see https://support.sophos.com/support/s/article/KB-000039014?language=en_US for all the settings that need to be set. That is not how to setup an MDM profile though, that is all on our community forum, which is https://community.sophos.com/intercept-x-endpoint/f/recommended-reads/116397/sophos-mac-endpoint-how-to-configure-jamf-privacy-preferences-for-10-15-compatibility has everything there.

We are aware though of an issue with Apple MDM and System Extensions, detailed here: https://support.sophos.com/support/s/article/KB-000041400?language=en_US  It is possible that you are running into this issue, which unfortunately is not under the control of Sophos.

Hi Matthew,

Please see https://support.sophos.com/support/s/article/KB-000039014?language=en_US for all the settings that need to be set. That is not how to setup an MDM profile though, that is all on our community forum, which is https://community.sophos.com/intercept-x-endpoint/f/recommended-reads/116397/sophos-mac-endpoint-how-to-configure-jamf-privacy-preferences-for-10-15-compatibility has everything there.

We are aware though of an issue with Apple MDM and System Extensions, detailed here: https://support.sophos.com/support/s/article/KB-000041400?language=en_US  It is possible that you are running into this issue, which unfortunately is not under the control of Sophos.

Is this a do this, then add that? This post yoursent is not concise and clear. Edit this support document to make it clear, because it is not.

Hello Matthew,

The Knowledge base article 39014 details for a direct install on a Machine, and details all the steps needed.

For MDM/JAMF configuration, it is all in the community article I linked. This KB has been tested repeatedly with customers.

The final link I posted was detailing a limitation we have seen with Apple's MDM solution on Big Sur (which JAMF uses). That is only applicable if you are running into that issue, which it is possible that you are, and unfortunately there is nothing Sophos can do about that behavior.

Issues with the System Extensions instructions. There is a conflict when creating multiple entries with the same identifier: "Team Identifiers must be unique for Configuration Types"

Also, the iamges in the instructions are unreadable, therefore cannot enter the correct information

Additionally, I have been working on this new configuration profile in hopes it will fix an issue with WebEx. It does not. Apple computers with Big Sur and SOPHOS installed cannot do telephony in WebEx. It affects Phone service functionality. Works fine without SOPHOS Endpoint installed.