• Add an exception in Sophos Endpoint Secutiry!!!

    Hi, i installed Sophos Endpoint Security and Control 1.4.0 Cloud Server; unfortunatly, it blocks my software (not a virus) and it (the software) doesn't work fine. I read all the FAQ and the Help-On-Line but i couldn't understand how i can resolve my…
  • Mac with SAV installed not showing up in SEC 5.4.1

    Hello, I am testing a couple issues we have been experiencing with the SophosScanD process using one of our production Macs. During my testing I had to reinstall Sophos, after removing the device from SEC and uninstalling from the endpoint, then reinstalling…
  • Sophos Anti-Virus will not install on one PC

    I'm currently having an issue with just one PC. This started a month or so ago when 10.6.4 was applied to all of the clients via the Recommended update policy. Network Threat Protection, System Protection, Remote Management System, AutoUpdate and Endpoint…
  • Sophos Enterprise console show manged computer need to restart

    hi i am using SEC 5.4.0 since last thurday it shows me that about half of my managed computer need to restart 0x0000006d. i further dig out so found that new update for sophos need Endpoint to restrart. and the list of Mnaged PC who are showing this…
  • exe created by Sophos Deployment Packager (1.2)... unable to install on Windows 2012 server virtual machine.

    Hi all, I running into problem trying to run the SophosEndpoint.exe created by Sophos Deployment Packager (1.2) on a Windows 2012 server virtual machine. When I run as administrator on Windows 2012 server virtual machine, nothing happens. If I run…
  • Dumb Question - New to Sophos - Please be gentle :)

    I am an IT service provider and I've just picked up a group of laptops from which the client would like Sophos Endpoint Agent removed. I'm brand-new to Sophos. Programs & Features control panel says it's version 11.5.0. I've been able to disable tamper…
  • C2/Zbot-A Infection

    According to my UTM I have a workstation infected with C2/Zbot-A . Sophos Endpoint is detecting nothing on this machine. I'm installing Malwarebytes to see if it'll catch anything. I'm finding no trace of this infection. My main issue/concern is why the…
  • Can't disable tamper protection

    I am unable on two computers to disable tamper protection. I log onto the Sophos Endpoint Protection using the tamper protection password. I switch the tamper slider to off and then try to go uninstall the software and it tells me to disable tamper protection…
  • Sophos System Protection Service generates Fatal error in Windows Logs

    Hi I have problem that on some Computers in Event viewer are many Errors that sounds like: "A fatal alert was received from the remote endpoint. the TLS protocol defined fatal alert code is 40." Source Schannel Event ID 36887. I have read this community…
  • How to allow checkpoint SSL extender

    Hi all I'm new to Sophos, so my apologies if the solution is blatantly obvious! I have a technician who is required to connect to a Checkpoint extender client to remotely access clients. The process he follows is: Connects to a website which checks…
  • Sophos Endpoint Installation Failed

    Sophos Endpoint won't install even after I've ran the removal program. new to sophos so what do i do?
  • "Deinstallation fehlgeschlagen. Sophos Anti-Virus MSI nicht auffindbar."

    Die Deinstallation ist nicht möglich: "Deinstallation fehlgeschlagen. Sophos Anti-Virus MSI nicht auffindbar." Auch eine erneute Installation (überschreiben) verändert die Ausgangssituation auch nicht. Uninstall impossible: "Uninstall failed. Sophos…
  • Managing Endpoints in an untrusted domain

    Hi all, Hoping that someone has seen this before and may be in a position to assist. I have a case open with Sophos Support, but they appear to have gone into hiding on me .. I have a test environment, which has been setup in on isolated network.…
  • Event Error

    Hello, Iv'e a problem with a Sophos endpoint, I've 1 pc with windows 7 and from two days I've these events: Event User Device When Failed to install savxp: OS component missing or too old. STZ-OB\Admin STZ-OB 12/7/16 8:15 AM Failed to install…
  • Sophos Endpoint keeps showing Unassigned Computer Objects

    Dear Experts, I need a bit help here. So Sophos Endpoint has been installed on a server and has been synced with our AD, by using the "Discover Computer" and Discover with Active Directory. Afterwards I started to set up the different folders in my…
  • Exclude Netapp Volume(s) From On-Access Scanning?

    All, Is it possible to "Exclude" a volume(s) on a Netapp, from On-Access Scanning? If it is, what would be the settings and proper format? For example, for "Item Type", would it be a "Folder", with the "Item Name" being "\vol\volume_name\"? Thank…
  • Failed to install Sophos Endpoint

    Hi to all. It's impossible to install SOPHOS ENDPOINT PROTECTION. It sets up SOPHOS MANAGEMENT COMMUNICATIONS SYSTEM and SOPHOS AUTOUPDATE XG, but doesn't ANVIVIRUS. The installations always finish showing this message: "Sophos Endpoint Security…
  • Sophos Endpoint Security & Control Command Line Error Code Issue

    Hello Everyone... I am using the license version of Sophos Endpoint Security & Control. I am trying to scan the file via Command Line Tool " Sav32Cli.exe " but for some reason I am not getting the output code in the console window. I am getting the…
  • Unexpected Behaviour

    I have recently installed Sophos UTM 9.4 Home. I have not set about doing mu, except installing Sophos endpoint AV on a few systems. It would seem that the end point installed machines are not able to D/L any file and some (not all) are getting a notification…
  • Known traffic to CnC but Sophos silent

    Hi, I have events triggered to a known CnC server. I see the events triggered on my NIDS from my internal sources (running Endpoint Advanced) and looking at the Sophos Firewall logs I see that swi_fc.exe connected to the IP address of the CnC server…
  • Virus/spyware GFP/Emds-A detected - not known on Sophos site

    I would like to have advise on this strange issue. When I started my laptop, Sophos reported 78 (later 71) new Virus/spyware threats, all with the name GFP/Emds-A. See screenshot below. I searched for this threat on the Sophos site, finding out that…
  • Application Control Browser Extensions - not being blocked?

    Hi I wonder if anyone can give me any advice? I've enabled Sophos Application Control and Applications themselves seem to be being blocoked without issue. I've noticed however that Browser Plugins which I have chosen to be blocked by Application…
  • Device not showing in Sophos central

    Hi Guys, Have an issue with an endpoint now showing up in Sophos, tried running an update but the machine is not showing up. I cannot re-install the agent as tamper protection has gone through already to the device, but because I cannot see it in…
  • Saw a URL get blocked in EC and after investigation found its caused by malware/spyware BUT

    So I recently saw our EC web event log several hits for *.symcb.com and after I googled symcb.com along with Sophos I found several infections that talked about it attempting to make web connections to this domain. So I first went to all the machines…
  • EnabelDebugging.exe on server 2012 r2

    When I try to run EnabelDebugging as disctrbed in How to enable verbose logging... the SAVService stops and I get this error: - C:\>EnableDebugging.exe Stopping service 'SAVService' Error: Unable to create DOM document instance COM error: -2147221164…