This knowledge base article provides a basic troubleshooting plan for the Sophos Endpoint which can be used to troubleshoot the following:
The key purpose of this troubleshooting guide is to determine which Sophos component is probably causing the issue being encountered by the end-user. Sophos has many configuration options and components that can be installed. This helps you pinpoint what may be the issue for you.
When following these troubleshooting steps, Sophos on the endpoint may be disabled and this could result in a security breach so proceeding with caution is highly advised. These steps should not be carried out on an endpoint with a suspected or known malware infection. Any important data should be backed up before carrying out these steps.
Applies to the following Sophos products and versions Sophos Central AdminCentral Windows Endpoint Intercept X 2.0.16Central Windows Endpoint 10.8.7
The screenshots in this article are from an Endpoint with Intercept X installed so there may be fewer options depending on the Endpoint version. You may disable tamper protection for a particular endpoint from the Sophos Central dashboard and skip steps two and three.
Note: If the settings are still turned off, simply repeat steps five and six.
Sign up to the Sophos Support SMS Notification Service to get the latest product release information and critical issues.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.