This article provides information about support for Apple MacOS 10.13 by Sophos Anti-Virus / Endpoint Protection The following sections are covered:
Applies to the following Sophos products and versions Sophos Anti-Virus for Mac OS XSophos Cloud Managed Endpoint 9.6.3 (Mac)
Operating systems MacOS 10.13
The following versions of SAV support MacOS 10.13:
Note: While 9.6.4 supports 10.13, it has a high CPU issue that can occur on 10.13. It is recommended to upgrade to 9.6.5+ if possible, which resolves this issue.
Due to a new security mechanism that Apple has released with MacOS 10.13, called Secure Kernel Extension Loading (SKEL), all non-Apple kernel extension (what we use to intercept files, etc) vendors must be manually added to a trusted list (Any user can add this). This allows the kernel extensions to load and is required for Sophos Anti-Virus to function properly. All 3rd party vendors are impacted by this change, and it is not possible to work around this requirement.
Once authorized, all future Sophos kernel extensions are allowed, even after uninstallation. This step is not needed again on a reinstall. Kernel extensions already installed during an upgrade from MacOS 10.12 are automatically authorized.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.