In https://support.sophos.com/support/s/article/KB-000034808?language=en_US , In the "On the installed Sophos Agent on a Windows device" section, there is a note that "Sophos Central will automatically turn on Tamper Protection after four hours", though...