• [HIGH] Alert for Sophos Central [WRET CORP]: A malware outbreak was detected (False Positive)

    Apr 10, 2023 12:25 PM 'https://142.251.16.132/' blocked due to category 'Advertisements & Pop-Ups' What happened: We made more than 100 detections in 24 hours. Where it happened: WRET1675 A couple of weeks ago I made a change to allow…
  • How to auto deploy Sophos Server Protection on AWS instances

    Hello Sophos community, I have recently migrated some of my business applications to Amazon Web Services (AWS) instances and I am looking to deploy Sophos Server Protection to these instances. However, I have a large number of instances and manually…
  • Inaccurate Device Status

    Sophos Central was uninstalled completely from a device yesterday. Today, Sophos Central indicates the status of the device as follows: Isn't this a little misleading? The only thing accurate about the reported status is that it has been offline…
  • SOPHOS DEVICE ENCRYPTION WITH OFFICE DOCUMENTS

    Translator Hi, i want to join a script.py to my Sophos Central in Device Encrytion , it will automatically detect a type of my office document (Public, secret and confidential) and make the encryption with it.
  • Changing account email address in Sophos Central

    Please help us changing account email form quangvt@tombow-tma.com.vn to tma@tombow-tma.com.vn Becuse old email had problem and can not login. Thank you.
  • Scan for Sophos Connect 2.1 in S.Central

    Is there a way to scan all devices and display which ones are still using the Sophos Connect v2.1 and below in Sophos Central?
  • You have exceeded the maximum number of allowed tries. Your account has been locked for the next 30 minutes

  • Mass deployment Sophos Central Client

    Hi, We want to deploy the Sophos Central Client on 30000 computers in a managed way and with as less as network wandwith as possible. So we want to deliver the Windows full client package to our computers as a first stage with our Enterpirise deployemt…
  • Can't finish setting PIN step

    When I try login on https://cloud.sophos.com/ ,central always response the https://cloud.sophos.com/mfa/fallback/form ,even me try again with 30 minutes later,still same situation,always ask me to input security code and PIN,when i clicked continue and…
  • How to detect Microsoft Office documents spawning processes?

    How to detect Microsoft Office documents spawning processes? Such as: PowerShell CMD WMI MSHTA Etc.
  • XG SFOS & firmware pattern version reporting

    Is there a way in Central to generate a report of SFOS and firmware/pattern versions of all XG's?
  • Re-Register Sophos Endpoint to Central WITHOUT NEEDING Tamper Protection password.

    Scenario: Machines which have been deleted from Central longer than 90 days, tamper protection password no longer available. User in remote location, no admin account acces for normal user. Users not IT Literate. No safe mode or recovery mode available…
  • NO PUEDO REGISTRARME EN: "https://cloud.sophos.com/manage/login".

    Good morning, please I request your kind help, I cannot register or enter the portal " ">cloud.sophos.com/.../login" . I get an error when registering the new code and the account has been blocked, it has already waited 4 days and I still have the same…
  • commands in linux

    hello team, does anyone know the linux commands for the sophos agent? -to scan. -clean PUAs. -check the status connect. and how to add a proxy.
  • Using LogMeIn Rescue Generates an Investigation

    I use LogMeIn Rescue to support remote PCs. Last week, Sophos EDR has started generating an Investigation after each use. Has anyone else seen this of have any insignt? Initial Detection: WIN-MITRE-Behavioral-TA0005-T1562.009 Risk 6 Category:…
  • Please reset my MFA PIN for the Sophos Central Portal

    Hello, please reset my MFA PIN for the Sophos Central Portal. no-reply-support@sophos.com > Your new Sophos support request was rejected
  • Sophos Central and Okta SSO

    Hello, Is it yet possible to use Okta as an SSO to the Central Admin portal? I found a post on here from over a year ago that states that it was released to the public June 2022 but I can not find any additional information, and I do not see any sort…
  • we can create Super admin user for Group mail ID?

    I have tried to add user in Sophos central for the group mail ID. Added successfully, but the welcome mail not received for the account mail.
  • Random File Transfer Blocked Message on SOPHOS Endpoint

    Hi, If anyone can help here with my query. We have some staff getting random "File Transfer blocked" notifications while they are using their computers. These files have been transferred long time ago but this windows keeps popping up from time to…
  • i am unable to reset password for sophos central

    i am not able to reset password for sophos central, i become to pin when i ask for reset password, after i enter the code i become the message identity is confirmed u can set a new password and when i set the new password i become a error authentification…
  • Sophos Central Requires Me to Authenticate Twice

    Hi, When logging into Sophos Central, I'm being required to authenticate with username and password twice before being sent my Security Code text message. Others in my organization are not having this issue. This issue started about a month ago and…
  • Internal server error and other issues after Login to Sophos Central

    having issues on some sites in the EMEA region today morning. Status site says all normal. Can you please check your systems? I entered username+password, then the 2fa code, after 2fa enter this error comes: other colleagues had this error even…
  • Sophos software being removed automatically

    We are using Sophos Central and use basic Endpoint Protection, InterceptX Advanced and Encryption - Windows 10 Education 21H2 clients. Desktops get Endpoint protection + InterceptX Laptops get Endpoint protection, InterceptX and Encryption. …
  • Unable login to Sophos Dashboard

    I am not able to login to Sophos Dashboard since today afternoon (3rd March 2023). After entering username/password, after entering the OTP, it goes back to login screen some times, or blank page sometimes.
  • Adaptive Active Adversary Protection

    From this morning's New Innovations email: "Adaptive Active Adversary Protection temporarily puts the impacted device into a more aggressive security mode that disrupts and delays the attacker by automatically blocking a wide range of activities that…