Sophos icon greyed out, can't manually scan with High Sierra; but WORKS with System Integrity Protection OFF

Hi everyone and Sophos,

I'm considering an enterprise/pro Sophos product, but wanted to try out Sophos Home for Mac first.  I have a 2014 Retina Macbook Pro 15" running High Sierra 10.13.

After I installed Sophos Home for Mac, the Sophos menu bar icon is greyed out.  I can open update Sophos and open Sophos Home and Home Dashboard, but when I click on the manual 'Scan' button - it initiates a scan, but makes no progress at all.

I used Mac Recovery Mode to TURN OFF SYSTEM INTEGRITY PROTECTION (csrutil disable).  Then rebooted, and SOPHOS THEN WORKED FINE - menu bar icon solid, manual scan works.  When I initially installed Sophos Home for Mac, I went to Mac Firewall settings and clicked 'Allow' for Sophos.  But obviously with System Integrity Protection, something with Sophos is getting blocked. 

Please help me fix this, as I want to get it working and can't buy any enterprise products until I make Sophos Home for Mac work and see if I like it.  I've attached my console Sophos log.  I also ran the Sophos Diagnostic Utility and saved the .tgz report file, but couldn't seem to attach it here.  Let me know if/how I can either post here my .tgz report file, or email it to one of you for help.  Thanks very much,

Adam

Sophos Anti-Virus.log
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright © 1989-2013 Sophos Ltd. All rights reserved.
com.sophos.autoupdate: 
com.sophos.autoupdate: Download completed at 02:18:45 10 October 2017
com.sophos.autoupdate: Update started at 02:18:45 10 October 2017
com.sophos.autoupdate: Update completed at 02:19:06 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 02:19 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus was updated
com.sophos.autoupdate: 
com.sophos.autoupdate: Update from Sophos has been cancelled due to frequency limit(once per hour) at 02:19:06 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 02:19 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus was updated
com.sophos.autoupdate: 
com.sophos.autoupdate: Proceed with manually triggered update from Sophos at 02:38:07 10 October 2017
com.sophos.autoupdate: Download completed at 02:38:29 10 October 2017
com.sophos.autoupdate: Software is up-to-date at 02:38:30 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 02:38 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus is up to date
com.sophos.autoupdate: 
com.sophos.autoupdate: Proceed with manually triggered update from Sophos at 02:43:19 10 October 2017
com.sophos.autoupdate: Download completed at 02:43:56 10 October 2017
com.sophos.autoupdate: Software is up-to-date at 02:44:08 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 02:44 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus is up to date
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright (c) 1989, 2004, Sophos Group, www.sophos.com
com.sophos.autoupdate: 
com.sophos.oas: Sophos Anti-Virus
com.sophos.oas: Product Version: 9.6.5
com.sophos.oas: Engine Version: 3.69.2
com.sophos.oas: Threat Data Version 5.44, September 19, 2017
com.sophos.oas: Includes detection for 13978880 threats
com.sophos.oas: Copyright (c) 1989-2016 Sophos Ltd, www.sophos.com
com.sophos.oas: 
com.sophos.oas: Using IDE files:
com.sophos.oas: 	   adwi-azu.ide    age-axca.ide    age-axdc.ide    age-axdx.ide    age-axei.ide    age-axep.ide    age-axfo.ide    age-axgp.ide    age-axhl.ide 
com.sophos.oas: 	   age-axhq.ide    age-axhs.ide    age-axiv.ide    age-axiz.ide    age-axjb.ide    age-axje.ide    age-axjn.ide    andro-sx.ide    bank-guh.ide 
com.sophos.oas: 	   bank-guo.ide    banl-cre.ide    blada-fi.ide    blada-fj.ide    darkc-fw.ide    darkc-fx.ide    darkc-gb.ide    decep-bd.ide    decep-bq.ide 
com.sophos.oas: 	   delf-gdh.ide    delf-gdy.ide    delf-gdz.ide    delf-gef.ide    delf-geo.ide    delf-gew.ide    delf-ggz.ide    delf-ghl.ide    docd-kbv.ide 
com.sophos.oas: 	   docd-kdm.ide    docd-kfi.ide    docd-kfm.ide    docd-kfn.ide    docd-kfp.ide    docd-kge.ide    docd-khi.ide    docd-kid.ide    docd-kig.ide 
com.sophos.oas: 	   docd-kip.ide    docd-kjr.ide    docd-kld.ide    docd-kln.ide    docd-klo.ide    docd-klp.ide    docd-klq.ide    docd-kmc.ide    docd-knb.ide 
com.sophos.oas: 	   docd-kpw.ide    docd-kqa.ide    docd-kqs.ide    docd-kqu.ide    docd-kqw.ide    docd-ktd.ide    docd-ktm.ide    docdro-i.ide    dwnl-ujc.ide 
com.sophos.oas: 	   dwnl-ulz.ide    dyrez-kv.ide    elenoo-b.ide    emote-fj.ide    emote-fm.ide    emote-fo.ide    emote-fy.ide    emote-gc.ide    emote-gd.ide 
com.sophos.oas: 	   emote-ge.ide    emote-gw.ide    emote-gz.ide    emote-hf.ide    emote-hh.ide    emote-hi.ide    emote-hp.ide    fakeal-y.ide    fare-doj.ide 
com.sophos.oas: 	   fare-dpc.ide    fare-dpk.ide    fare-dpm.ide    fare-dpv.ide    fare-dpx.ide    fare-dqc.ide    fare-dqd.ide    fare-dqg.ide    fare-dqh.ide 
com.sophos.oas: 	   fare-dqj.ide    fare-dqs.ide    fare-dra.ide    fare-dsd.ide    fare-dse.ide     gozi-jv.ide     gozi-kb.ide     gozi-ke.ide     gozi-kk.ide 
com.sophos.oas: 	    gozi-kn.ide     gozi-kr.ide     gozi-kw.ide     gozi-lb.ide     gozi-lc.ide     gozi-le.ide     gozi-lf.ide    horst-jy.ide    htadl-bu.ide 
com.sophos.oas: 	   htmld-al.ide    inje-cte.ide    inje-ctg.ide    inje-ctl.ide    inje-ctz.ide    inje-cue.ide    injec-ud.ide    injec-ui.ide    injec-us.ide 
com.sophos.oas: 	   injec-vh.ide    jsdld-xi.ide    kovte-hf.ide    lethi-bx.ide    lethi-by.ide    lethi-bz.ide    lethi-ca.ide    lethi-cb.ide    lethi-cc.ide 
com.sophos.oas: 	   lethi-cd.ide    lethi-ce.ide    lethi-cg.ide    lock-aaf.ide    lock-aah.ide    lock-aaw.ide    lock-aba.ide    lock-abb.ide    lock-abh.ide 
com.sophos.oas: 	   lock-abi.ide    lock-abw.ide    lock-aby.ide    madefr-a.ide    miner-cz.ide    miner-db.ide     mogoa-a.ide    msil-kgf.ide    msil-kgg.ide 
com.sophos.oas: 	   msil-kgw.ide    msil-khb.ide    msil-khd.ide    msil-khk.ide    msil-khq.ide    msil-khr.ide    msil-khw.ide    msil-kjx.ide    msil-kkm.ide 
com.sophos.oas: 	   msil-kkp.ide    msili-oj.ide    msili-ol.ide    msili-oo.ide    msilkl-q.ide    msilkl-w.ide    nanoc-sb.ide    nanoc-sq.ide    nanoc-sx.ide 
com.sophos.oas: 	   nanoc-tb.ide    nymai-gx.ide    pdfdl-aa.ide    pdfu-cmu.ide    pdfu-cnu.ide    pdfu-coa.ide    pdfu-cpi.ide    pdfu-cpk.ide    pdfu-cpl.ide 
com.sophos.oas: 	   pdfu-csg.ide    pdfu-csi.ide    pdfu-ctk.ide    pdfu-cwq.ide    phis-axl.ide    phis-ayh.ide    phis-ayq.ide    phis-azp.ide    phis-azz.ide 
com.sophos.oas: 	   phis-bah.ide    phis-baj.ide    phis-bat.ide    phis-baw.ide      pony-n.ide    ramni-fm.ide    rans-eqp.ide    rans-eqt.ide    rans-equ.ide 
com.sophos.oas: 	   rans-eqw.ide    rans-eqy.ide    rans-erc.ide    rans-erd.ide     recam-w.ide     recam-z.ide    remcos-o.ide    remcos-u.ide    remcos-y.ide 
com.sophos.oas: 	      rtf-k.ide    rtfdl-ao.ide    rtfex-ef.ide    shellt-b.ide    sinow-ch.ide     spy-amo.ide     spy-amp.ide     spy-amq.ide     spy-amr.ide 
com.sophos.oas: 	    spy-amt.ide     spy-amy.ide    trick-af.ide    trick-ag.ide    trickb-r.ide    trickb-v.ide      vb-jny.ide      vbs-ow.ide         vdl.dat 
com.sophos.oas: 	   wdfloa-d.ide     xtbl-al.ide     xtbl-ao.ide    zbot-lty.ide    zbot-ltz.ide 
com.sophos.oas: 
com.sophos.oas: 
com.sophos.oas: Started On-access protection within ScanD at 3:32 AM on October 10, 2017
com.sophos.oas: 
com.sophos.oas: 
com.sophos.autoupdate: Proceed with manually triggered update from Sophos at 03:33:18 10 October 2017
com.sophos.autoupdate: Download completed at 03:33:47 10 October 2017
com.sophos.autoupdate: Software is up-to-date at 03:33:58 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 03:33 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus is up to date
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright (c) 1989, 2004, Sophos Group, www.sophos.com
com.sophos.autoupdate: 
com.sophos.autoupdate: Download completed at 06:14:23 10 October 2017
com.sophos.autoupdate: Update started at 06:14:24 10 October 2017
com.sophos.autoupdate: Update completed at 06:14:38 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 06:14 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus was updated
com.sophos.autoupdate: 
com.sophos.autoupdate: Download completed at 10:30:18 10 October 2017
com.sophos.autoupdate: Update started at 10:30:18 10 October 2017
com.sophos.autoupdate: Update completed at 10:30:33 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 10:30 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus was updated
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright (c) 1989, 2004, Sophos Group, www.sophos.com
com.sophos.autoupdate: 
com.sophos.autoupdate: Download completed at 11:55:10 10 October 2017
com.sophos.autoupdate: Update started at 11:55:10 10 October 2017
com.sophos.autoupdate: Update completed at 11:55:24 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 11:55 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus was updated
com.sophos.autoupdate: 
com.sophos.autoupdate: Update from Sophos has been cancelled due to frequency limit(once per hour) at 11:55:24 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 11:55 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus was updated
com.sophos.autoupdate: 
com.sophos.autoupdate: Download completed at 12:11:41 10 October 2017
com.sophos.autoupdate: Update started at 12:11:41 10 October 2017
com.sophos.autoupdate: Update completed at 12:11:54 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 12:11 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus was updated
com.sophos.autoupdate: 
com.sophos.autoupdate: Update from Sophos has been cancelled due to frequency limit(once per hour) at 12:11:54 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 12:11 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus was updated
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright (c) 1989, 2004, Sophos Group, www.sophos.com
com.sophos.autoupdate: 
com.sophos.autoupdate: Download completed at 13:12:06 10 October 2017
com.sophos.autoupdate: Software is up-to-date at 13:12:06 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 13:12 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus is up to date
com.sophos.autoupdate: 
com.sophos.autoupdate: Download completed at 21:03:45 10 October 2017
com.sophos.autoupdate: Software is up-to-date at 21:03:47 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 21:03 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus is up to date
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright (c) 1989, 2004, Sophos Group, www.sophos.com
com.sophos.autoupdate: 
com.sophos.oas: Sophos Anti-Virus
com.sophos.oas: Product Version: 9.6.5
com.sophos.oas: Engine Version: 3.69.2
com.sophos.oas: Threat Data Version 5.44, September 19, 2017
com.sophos.oas: Includes detection for 13978957 threats
com.sophos.oas: Copyright (c) 1989-2016 Sophos Ltd, www.sophos.com
com.sophos.oas: 
com.sophos.oas: Using IDE files:
com.sophos.oas: 	   adwi-azu.ide    age-axca.ide    age-axdc.ide    age-axdx.ide    age-axei.ide    age-axep.ide    age-axfo.ide    age-axgp.ide    age-axhl.ide 
com.sophos.oas: 	   age-axhq.ide    age-axhs.ide    age-axiv.ide    age-axiz.ide    age-axjb.ide    age-axje.ide    age-axjn.ide    andro-sx.ide    bank-guh.ide 
com.sophos.oas: 	   bank-guo.ide    banl-cre.ide    blada-fi.ide    blada-fj.ide    blada-fk.ide    darkc-fw.ide    darkc-fx.ide    darkc-gb.ide    darkc-gc.ide 
com.sophos.oas: 	   decep-bd.ide    decep-bq.ide    delf-gdh.ide    delf-gdy.ide    delf-gdz.ide    delf-gef.ide    delf-geo.ide    delf-gew.ide    delf-ggz.ide 
com.sophos.oas: 	   delf-ghl.ide    delf-ghn.ide    docd-kbv.ide    docd-kdm.ide    docd-kfi.ide    docd-kfm.ide    docd-kfn.ide    docd-kfp.ide    docd-kge.ide 
com.sophos.oas: 	   docd-khi.ide    docd-kid.ide    docd-kig.ide    docd-kip.ide    docd-kjr.ide    docd-kld.ide    docd-kln.ide    docd-klo.ide    docd-klp.ide 
com.sophos.oas: 	   docd-klq.ide    docd-kmc.ide    docd-knb.ide    docd-kpw.ide    docd-kqa.ide    docd-kqs.ide    docd-kqu.ide    docd-kqw.ide    docd-ktd.ide 
com.sophos.oas: 	   docd-ktm.ide    docdro-i.ide    dwnl-ujc.ide    dwnl-ulz.ide    dyrez-kv.ide    elenoo-b.ide    emote-fj.ide    emote-fm.ide    emote-fo.ide 
com.sophos.oas: 	   emote-fy.ide    emote-gc.ide    emote-gd.ide    emote-ge.ide    emote-gw.ide    emote-gz.ide    emote-hf.ide    emote-hh.ide    emote-hi.ide 
com.sophos.oas: 	   emote-hp.ide    fakeal-y.ide    fare-doj.ide    fare-dpc.ide    fare-dpk.ide    fare-dpm.ide    fare-dpv.ide    fare-dpx.ide    fare-dqc.ide 
com.sophos.oas: 	   fare-dqd.ide    fare-dqg.ide    fare-dqh.ide    fare-dqj.ide    fare-dqs.ide    fare-dra.ide    fare-dsd.ide    fare-dse.ide     gozi-jv.ide 
com.sophos.oas: 	    gozi-kb.ide     gozi-ke.ide     gozi-kk.ide     gozi-kn.ide     gozi-kr.ide     gozi-kw.ide     gozi-lb.ide     gozi-lc.ide     gozi-le.ide 
com.sophos.oas: 	    gozi-lf.ide    horst-jy.ide    htadl-bu.ide    htmld-al.ide    inje-cte.ide    inje-ctg.ide    inje-ctl.ide    inje-ctz.ide    inje-cue.ide 
com.sophos.oas: 	   injec-ud.ide    injec-ui.ide    injec-us.ide    injec-vh.ide    jsdld-xi.ide    kovte-hf.ide    lethi-bx.ide    lethi-by.ide    lethi-bz.ide 
com.sophos.oas: 	   lethi-ca.ide    lethi-cb.ide    lethi-cc.ide    lethi-cd.ide    lethi-ce.ide    lethi-cg.ide    lock-aaf.ide    lock-aah.ide    lock-aaw.ide 
com.sophos.oas: 	   lock-aba.ide    lock-abb.ide    lock-abh.ide    lock-abi.ide    lock-abw.ide    lock-aby.ide    madefr-a.ide    miner-cz.ide    miner-db.ide 
com.sophos.oas: 	    mogoa-a.ide    msil-kgf.ide    msil-kgg.ide    msil-kgw.ide    msil-khb.ide    msil-khd.ide    msil-khk.ide    msil-khq.ide    msil-khr.ide 
com.sophos.oas: 	   msil-khw.ide    msil-kjx.ide    msil-kkm.ide    msil-kkp.ide    msili-oj.ide    msili-ol.ide    msili-oo.ide    msilkl-q.ide    msilkl-w.ide 
com.sophos.oas: 	   nanoc-sb.ide    nanoc-sq.ide    nanoc-sx.ide    nanoc-tb.ide    nymai-gx.ide    pdfdl-aa.ide    pdfu-cmu.ide    pdfu-cnu.ide    pdfu-coa.ide 
com.sophos.oas: 	   pdfu-cpi.ide    pdfu-cpk.ide    pdfu-cpl.ide    pdfu-csg.ide    pdfu-csi.ide    pdfu-ctk.ide    pdfu-cwq.ide    phis-axl.ide    phis-ayh.ide 
com.sophos.oas: 	   phis-ayq.ide    phis-azp.ide    phis-azz.ide    phis-bah.ide    phis-baj.ide    phis-bat.ide    phis-baw.ide      pony-n.ide    ramni-fm.ide 
com.sophos.oas: 	   rans-eqp.ide    rans-eqt.ide    rans-equ.ide    rans-eqw.ide    rans-eqy.ide    rans-erc.ide    rans-erd.ide     recam-w.ide     recam-z.ide 
com.sophos.oas: 	   remcos-o.ide    remcos-u.ide    remcos-y.ide       rtf-k.ide    rtfdl-ao.ide    rtfex-ef.ide    shellt-b.ide    sinow-ch.ide     spy-amo.ide 
com.sophos.oas: 	    spy-amp.ide     spy-amq.ide     spy-amr.ide     spy-amt.ide     spy-amy.ide    trick-af.ide    trick-ag.ide    trickb-r.ide    trickb-v.ide 
com.sophos.oas: 	     vb-jny.ide      vbs-ow.ide         vdl.dat    wdfloa-d.ide     xtbl-al.ide     xtbl-ao.ide    zbot-lty.ide    zbot-ltz.ide 
com.sophos.oas: 
com.sophos.oas: 
com.sophos.oas: Started On-access protection within ScanD at 9:10 PM on October 10, 2017
com.sophos.oas: 
com.sophos.oas: 
com.sophos.autoupdate: Proceed with manually triggered update from Sophos at 21:11:07 10 October 2017
com.sophos.autoupdate: Download completed at 21:11:53 10 October 2017
com.sophos.autoupdate: Software is up-to-date at 21:11:56 10 October 2017
com.sophos.autoupdate: Info:	Checked primary server at 21:11 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus is up to date
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright (c) 1989, 2004, Sophos Group, www.sophos.com
com.sophos.autoupdate: 
com.sophos.oas: Sophos Anti-Virus
com.sophos.oas: Product Version: 9.6.5
com.sophos.oas: Engine Version: 3.69.2
com.sophos.oas: Threat Data Version 5.44, September 19, 2017
com.sophos.oas: Includes detection for 13978957 threats
com.sophos.oas: Copyright (c) 1989-2016 Sophos Ltd, www.sophos.com
com.sophos.oas: 
com.sophos.oas: Using IDE files:
com.sophos.oas: 	   adwi-azu.ide    age-axca.ide    age-axdc.ide    age-axdx.ide    age-axei.ide    age-axep.ide    age-axfo.ide    age-axgp.ide    age-axhl.ide 
com.sophos.oas: 	   age-axhq.ide    age-axhs.ide    age-axiv.ide    age-axiz.ide    age-axjb.ide    age-axje.ide    age-axjn.ide    andro-sx.ide    bank-guh.ide 
com.sophos.oas: 	   bank-guo.ide    banl-cre.ide    blada-fi.ide    blada-fj.ide    blada-fk.ide    darkc-fw.ide    darkc-fx.ide    darkc-gb.ide    darkc-gc.ide 
com.sophos.oas: 	   decep-bd.ide    decep-bq.ide    delf-gdh.ide    delf-gdy.ide    delf-gdz.ide    delf-gef.ide    delf-geo.ide    delf-gew.ide    delf-ggz.ide 
com.sophos.oas: 	   delf-ghl.ide    delf-ghn.ide    docd-kbv.ide    docd-kdm.ide    docd-kfi.ide    docd-kfm.ide    docd-kfn.ide    docd-kfp.ide    docd-kge.ide 
com.sophos.oas: 	   docd-khi.ide    docd-kid.ide    docd-kig.ide    docd-kip.ide    docd-kjr.ide    docd-kld.ide    docd-kln.ide    docd-klo.ide    docd-klp.ide 
com.sophos.oas: 	   docd-klq.ide    docd-kmc.ide    docd-knb.ide    docd-kpw.ide    docd-kqa.ide    docd-kqs.ide    docd-kqu.ide    docd-kqw.ide    docd-ktd.ide 
com.sophos.oas: 	   docd-ktm.ide    docdro-i.ide    dwnl-ujc.ide    dwnl-ulz.ide    dyrez-kv.ide    elenoo-b.ide    emote-fj.ide    emote-fm.ide    emote-fo.ide 
com.sophos.oas: 	   emote-fy.ide    emote-gc.ide    emote-gd.ide    emote-ge.ide    emote-gw.ide    emote-gz.ide    emote-hf.ide    emote-hh.ide    emote-hi.ide 
com.sophos.oas: 	   emote-hp.ide    fakeal-y.ide    fare-doj.ide    fare-dpc.ide    fare-dpk.ide    fare-dpm.ide    fare-dpv.ide    fare-dpx.ide    fare-dqc.ide 
com.sophos.oas: 	   fare-dqd.ide    fare-dqg.ide    fare-dqh.ide    fare-dqj.ide    fare-dqs.ide    fare-dra.ide    fare-dsd.ide    fare-dse.ide     gozi-jv.ide 
com.sophos.oas: 	    gozi-kb.ide     gozi-ke.ide     gozi-kk.ide     gozi-kn.ide     gozi-kr.ide     gozi-kw.ide     gozi-lb.ide     gozi-lc.ide     gozi-le.ide 
com.sophos.oas: 	    gozi-lf.ide    horst-jy.ide    htadl-bu.ide    htmld-al.ide    inje-cte.ide    inje-ctg.ide    inje-ctl.ide    inje-ctz.ide    inje-cue.ide 
com.sophos.oas: 	   injec-ud.ide    injec-ui.ide    injec-us.ide    injec-vh.ide    jsdld-xi.ide    kovte-hf.ide    lethi-bx.ide    lethi-by.ide    lethi-bz.ide 
com.sophos.oas: 	   lethi-ca.ide    lethi-cb.ide    lethi-cc.ide    lethi-cd.ide    lethi-ce.ide    lethi-cg.ide    lock-aaf.ide    lock-aah.ide    lock-aaw.ide 
com.sophos.oas: 	   lock-aba.ide    lock-abb.ide    lock-abh.ide    lock-abi.ide    lock-abw.ide    lock-aby.ide    madefr-a.ide    miner-cz.ide    miner-db.ide 
com.sophos.oas: 	    mogoa-a.ide    msil-kgf.ide    msil-kgg.ide    msil-kgw.ide    msil-khb.ide    msil-khd.ide    msil-khk.ide    msil-khq.ide    msil-khr.ide 
com.sophos.oas: 	   msil-khw.ide    msil-kjx.ide    msil-kkm.ide    msil-kkp.ide    msili-oj.ide    msili-ol.ide    msili-oo.ide    msilkl-q.ide    msilkl-w.ide 
com.sophos.oas: 	   nanoc-sb.ide    nanoc-sq.ide    nanoc-sx.ide    nanoc-tb.ide    nymai-gx.ide    pdfdl-aa.ide    pdfu-cmu.ide    pdfu-cnu.ide    pdfu-coa.ide 
com.sophos.oas: 	   pdfu-cpi.ide    pdfu-cpk.ide    pdfu-cpl.ide    pdfu-csg.ide    pdfu-csi.ide    pdfu-ctk.ide    pdfu-cwq.ide    phis-axl.ide    phis-ayh.ide 
com.sophos.oas: 	   phis-ayq.ide    phis-azp.ide    phis-azz.ide    phis-bah.ide    phis-baj.ide    phis-bat.ide    phis-baw.ide      pony-n.ide    ramni-fm.ide 
com.sophos.oas: 	   rans-eqp.ide    rans-eqt.ide    rans-equ.ide    rans-eqw.ide    rans-eqy.ide    rans-erc.ide    rans-erd.ide     recam-w.ide     recam-z.ide 
com.sophos.oas: 	   remcos-o.ide    remcos-u.ide    remcos-y.ide       rtf-k.ide    rtfdl-ao.ide    rtfex-ef.ide    shellt-b.ide    sinow-ch.ide     spy-amo.ide 
com.sophos.oas: 	    spy-amp.ide     spy-amq.ide     spy-amr.ide     spy-amt.ide     spy-amy.ide    trick-af.ide    trick-ag.ide    trickb-r.ide    trickb-v.ide 
com.sophos.oas: 	     vb-jny.ide      vbs-ow.ide         vdl.dat    wdfloa-d.ide     xtbl-al.ide     xtbl-ao.ide    zbot-lty.ide    zbot-ltz.ide 
com.sophos.oas: 
com.sophos.oas: 
com.sophos.oas: Started On-access protection within ScanD at 9:33 PM on October 10, 2017
com.sophos.oas: 
com.sophos.oas: 
com.sophos.autoupdate: Download completed at 22:12:04 10 M10 2017
com.sophos.autoupdate: Software is up-to-date at 22:12:07 10 M10 2017
com.sophos.autoupdate: Info:	Checked primary server at 22:12 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus is up to date
com.sophos.autoupdate: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright (c) 1989, 2004, Sophos Group, www.sophos.com
com.sophos.autoupdate: 
com.sophos.oas: Sophos Anti-Virus
com.sophos.oas: Product Version: 9.6.5
com.sophos.oas: Engine Version: 3.69.2
com.sophos.oas: Threat Data Version 5.44, 2017 M09 19
com.sophos.oas: Includes detection for 13978957 threats
com.sophos.oas: Copyright (c) 1989-2016 Sophos Ltd, www.sophos.com
com.sophos.oas: 
com.sophos.oas: Using IDE files:
com.sophos.oas: 	   adwi-azu.ide    age-axca.ide    age-axdc.ide    age-axdx.ide    age-axei.ide    age-axep.ide    age-axfo.ide    age-axgp.ide    age-axhl.ide 
com.sophos.oas: 	   age-axhq.ide    age-axhs.ide    age-axiv.ide    age-axiz.ide    age-axjb.ide    age-axje.ide    age-axjn.ide    andro-sx.ide    bank-guh.ide 
com.sophos.oas: 	   bank-guo.ide    banl-cre.ide    blada-fi.ide    blada-fj.ide    blada-fk.ide    darkc-fw.ide    darkc-fx.ide    darkc-gb.ide    darkc-gc.ide 
com.sophos.oas: 	   decep-bd.ide    decep-bq.ide    delf-gdh.ide    delf-gdy.ide    delf-gdz.ide    delf-gef.ide    delf-geo.ide    delf-gew.ide    delf-ggz.ide 
com.sophos.oas: 	   delf-ghl.ide    delf-ghn.ide    docd-kbv.ide    docd-kdm.ide    docd-kfi.ide    docd-kfm.ide    docd-kfn.ide    docd-kfp.ide    docd-kge.ide 
com.sophos.oas: 	   docd-khi.ide    docd-kid.ide    docd-kig.ide    docd-kip.ide    docd-kjr.ide    docd-kld.ide    docd-kln.ide    docd-klo.ide    docd-klp.ide 
com.sophos.oas: 	   docd-klq.ide    docd-kmc.ide    docd-knb.ide    docd-kpw.ide    docd-kqa.ide    docd-kqs.ide    docd-kqu.ide    docd-kqw.ide    docd-ktd.ide 
com.sophos.oas: 	   docd-ktm.ide    docdro-i.ide    dwnl-ujc.ide    dwnl-ulz.ide    dyrez-kv.ide    elenoo-b.ide    emote-fj.ide    emote-fm.ide    emote-fo.ide 
com.sophos.oas: 	   emote-fy.ide    emote-gc.ide    emote-gd.ide    emote-ge.ide    emote-gw.ide    emote-gz.ide    emote-hf.ide    emote-hh.ide    emote-hi.ide 
com.sophos.oas: 	   emote-hp.ide    fakeal-y.ide    fare-doj.ide    fare-dpc.ide    fare-dpk.ide    fare-dpm.ide    fare-dpv.ide    fare-dpx.ide    fare-dqc.ide 
com.sophos.oas: 	   fare-dqd.ide    fare-dqg.ide    fare-dqh.ide    fare-dqj.ide    fare-dqs.ide    fare-dra.ide    fare-dsd.ide    fare-dse.ide     gozi-jv.ide 
com.sophos.oas: 	    gozi-kb.ide     gozi-ke.ide     gozi-kk.ide     gozi-kn.ide     gozi-kr.ide     gozi-kw.ide     gozi-lb.ide     gozi-lc.ide     gozi-le.ide 
com.sophos.oas: 	    gozi-lf.ide    horst-jy.ide    htadl-bu.ide    htmld-al.ide    inje-cte.ide    inje-ctg.ide    inje-ctl.ide    inje-ctz.ide    inje-cue.ide 
com.sophos.oas: 	   injec-ud.ide    injec-ui.ide    injec-us.ide    injec-vh.ide    jsdld-xi.ide    kovte-hf.ide    lethi-bx.ide    lethi-by.ide    lethi-bz.ide 
com.sophos.oas: 	   lethi-ca.ide    lethi-cb.ide    lethi-cc.ide    lethi-cd.ide    lethi-ce.ide    lethi-cg.ide    lock-aaf.ide    lock-aah.ide    lock-aaw.ide 
com.sophos.oas: 	   lock-aba.ide    lock-abb.ide    lock-abh.ide    lock-abi.ide    lock-abw.ide    lock-aby.ide    madefr-a.ide    miner-cz.ide    miner-db.ide 
com.sophos.oas: 	    mogoa-a.ide    msil-kgf.ide    msil-kgg.ide    msil-kgw.ide    msil-khb.ide    msil-khd.ide    msil-khk.ide    msil-khq.ide    msil-khr.ide 
com.sophos.oas: 	   msil-khw.ide    msil-kjx.ide    msil-kkm.ide    msil-kkp.ide    msili-oj.ide    msili-ol.ide    msili-oo.ide    msilkl-q.ide    msilkl-w.ide 
com.sophos.oas: 	   nanoc-sb.ide    nanoc-sq.ide    nanoc-sx.ide    nanoc-tb.ide    nymai-gx.ide    pdfdl-aa.ide    pdfu-cmu.ide    pdfu-cnu.ide    pdfu-coa.ide 
com.sophos.oas: 	   pdfu-cpi.ide    pdfu-cpk.ide    pdfu-cpl.ide    pdfu-csg.ide    pdfu-csi.ide    pdfu-ctk.ide    pdfu-cwq.ide    phis-axl.ide    phis-ayh.ide 
com.sophos.oas: 	   phis-ayq.ide    phis-azp.ide    phis-azz.ide    phis-bah.ide    phis-baj.ide    phis-bat.ide    phis-baw.ide      pony-n.ide    ramni-fm.ide 
com.sophos.oas: 	   rans-eqp.ide    rans-eqt.ide    rans-equ.ide    rans-eqw.ide    rans-eqy.ide    rans-erc.ide    rans-erd.ide     recam-w.ide     recam-z.ide 
com.sophos.oas: 	   remcos-o.ide    remcos-u.ide    remcos-y.ide       rtf-k.ide    rtfdl-ao.ide    rtfex-ef.ide    shellt-b.ide    sinow-ch.ide     spy-amo.ide 
com.sophos.oas: 	    spy-amp.ide     spy-amq.ide     spy-amr.ide     spy-amt.ide     spy-amy.ide    trick-af.ide    trick-ag.ide    trickb-r.ide    trickb-v.ide 
com.sophos.oas: 	     vb-jny.ide      vbs-ow.ide         vdl.dat    wdfloa-d.ide     xtbl-al.ide     xtbl-ao.ide    zbot-lty.ide    zbot-ltz.ide 
com.sophos.oas: 
com.sophos.oas: 
com.sophos.oas: Started On-access protection within ScanD at 22:13 on 2017 M10 10
com.sophos.oas: 
com.sophos.oas: 
com.sophos.autoupdate: Sophos AutoUpdate
com.sophos.autoupdate: Version 9.6.5
com.sophos.autoupdate: Copyright (c) 1989, 2004, Sophos Group, www.sophos.com
com.sophos.autoupdate: 
com.sophos.autoupdate: Download completed at 23:12:22 10 M10 2017
com.sophos.autoupdate: Software is up-to-date at 23:12:33 10 M10 2017
com.sophos.autoupdate: Info:	Checked primary server at 23:12 on 10 October 2017
com.sophos.autoupdate: 	Sophos Anti-Virus is up to date
com.sophos.autoupdate: 

  • Hi Adam , 

    Could you share the SDU logs for the same to analyze them, You may retrieve the SDU logs and upload onto any shared drive and share the link via private message me along with the Link to this thread as a reference to the issue.

    To fetch the SDU logs kindly follow the KB article. https://sophos.com/kb/33533

  • In reply to Aditya Patel:

    Hi Aditya,

     

    Thank you very much, I sent you a PM with my log file.  Please let me know if there's anything else you need me to do or send you.  I really appreciate your help,

     

    Adam

  • In reply to Adam Margulies:

    Aditya,

     

    I just sent you a second PM here, with some more info about my situation.  I read online that the Mac's System Integrity Protection has a list of protected files located at - /system/library/sandboxes/rootless.conf.  It lists all protected files and folders, and whether there are any exceptions made for other apps which are granted access to those protected files.  I uploaded a copy of my rootless.conf file and sent you a link in the PM.  Perhaps you can see whether Sophos requires access to any of those protected files/folders listed in that rootless.conf file.  Thanks very much,

     

    Adam

  • In reply to Adam Margulies:

    MORE INFO -

    My computer previously had High Sierra with the older Sophos for Mac, and it worked fine.  I did a Time Machine backup, then erased my computer's internal drive, then reinstalled a fresh copy of High Sierra.  I then used Migration Assistant to import all my apps, files and data from the Time Machine Backup - I checked every item you can import.  Then I downloaded and installed the newest Sophos Home for Mac, and THAT'S WHEN I had trouble - the new Sophos Home for Mac has a greyed out icon in menu bar, and manual scans don't work.

     

    I just installed a fresh copy of High Sierra on a different EXTERNAL hard drive, downloaded Sophos Home for Mac and it works fine on my computer.  So obviously there's some type of settings or files that were imported with Migration Assistant that's preventing Sophos Home for Mac from running properly on my computer's internal drive.  And as I mentioned before, when I disable System Integrity Protection, Sophos then works fine, but DOESN'T work with System Integrity Protection enabled.  PLEASE HELP!  Thanks a lot.

  • In reply to Adam Margulies:

    I FIXED IT!!!

     

    I fixed Sophos Home for Mac on my computer, finally.  As I suspected, when you run the Sophos Uninstaller, it DOES NOT REMOVE even close to all the files Sophos had installed.

    I used Finder (with Show System Files enabled) to find all files with Sophos in the name, or even in the contents.  There were many .kext kernel extension Sophos files I found, which couldn't be delete by me because of System Integrity Protection being enabled.  I booted into Recovery Mode and disable SIP (csrutil disable) with Terminal, then rebooted and again found all those Sophos files with Finder.  I deleted every single file that had Sophos in the actual name of the file - TONS of .plist and .kext Sophos files throughout various folders, many buried DEEP under layers of system folders.  Then rebooted into Recovery, enabled SIP, rebooted, and re-downloaded Sophos Home for Mac.  As part of the installation, I opened Sys. Preferences Privacy/Security, Accessibility, dragged the Sophos Home app from Applications folder into the list of approved apps under Accessibility.  And after Sophos updated, it works fine now - icon in menu bar is solid and I can run manual scan.

     

    So apparently, when you have apps which won't run properly because System Integrity Protection is blocking them somehow, you need to disable SIP, delete all their protected .kext and associated files, re-enable SIP, then reinstall the apps from scratch.  And THEN they seem to work.

  • In reply to Adam Margulies:

    Hi Adam,

    Thank you for the solution for the issue you have experienced with, such information will be helpful