Windows issues following Core Agent 2.7.6 and Intercept X 2.0.17 update. See KBA 135504 for more information.
We'd love to hear about it! Click here to go to the product suggestion community
We recently switched from on-prem Sophos to Sophos Central with Intercept X and EDR.
Just started happening with the past couple of days, but when a user opens Outlook it takes forever to load. Anybody have any ideas?
I came across this Allow computers to send data on suspicious files, network events, and admin tool activity to Sophos Central, but it is hardly a solution; it is turning off the very thing we paid money to have.
Can you tell me if this only effects a single OS and particular version of Outlook? How many users in total are effected?
A valid step would be to try applying the Intercept X hotfix, which is basically a beta patch for the fixes planned for our next release: https://community.sophos.com/kb/en-us/133140
Let me know what result you get.
In reply to ZGV:
FYI: This may be an Outlook issue, I would try either an repair/reinstall of Outlook first.
In reply to Badrobot:
Tried both does not help. It is directly related to whether the pst file is on the server or on the local C drive. If we move the PST to the local C drive the time speeds back up; if the PST is on a network drive, it takes 5 minutes to open Outlook.
In reply to April Beachy:
Hello April Beachy
You can try unchecking Remote files under "Real-time Scanning - Local Files and Network Shares" if the pst file is stored on a share, if that will help.
With that option checked, files from the network are scanned when these are accessed. If the server already has Sophos installed and is being protected (for example, has Real-time and scheduled scans, and may also have Intercept X installed), doing real-time scanning on remote(ly accessed) files by the endpoint shouldn't be as necessary.
Also you can choose to add a file type exclusion for PST files locally, or on the network, on your Threat Protection policy.