Starting today around noon (Pacific time) we stopped being able to setup new workstations in Sophos Central. The logs (on multiple machines) show this: 2024-08-19T22:39:44.0627204Z INFO : Opening connection to mcs2-cloudstation-us-west-2.prod.hydra…

Hi, We've recently moved to a hybrid setup for our Windows devices (local active and Intune). Many devices have successfully fully setup but most have not. They are registered with Intune and show compliance, however we have found that those not working…

Hi i got this error while trying to install sophos agent.

Recently, I've noticed a troubling increase in false positives from Sophos Central that are impacting our workflow significantly. Legitimate files and applications are being flagged as threats, causing unnecessary disruptions and delays. This issue seems…

Hallo, ich habe ein Problem mit der Installation der kundenspezifischen .exe-Datei, die ich aus dem Sophos Central des Kunden herunterlade. Während des Setups wird das Gerät erfolgreich in Sophos Central registriert und der Download verläuft reibungslos…

Hello, I would like to suggest an improvement to the Peripheral Control Policy by adding a note/comment field where we can enter a text justifying the exception. I have “old” exceptions for USB sticks/disks that I can't remember what/who they were…

Hi, Is there any osquery to get all the domain-joined machines where the "Domain Users" group is added to the "Remote Desktop Users" local group?

Hi, We have some devices detected as cloned devices by Sophos Central. Old devices last communication time stamp practically same as new device install time. One of them had been cloned twice in last 2 days (3 device copies now). Thanks in advance…

Hello community, How can I decontrol a specified category for a user or user group ? Best regards, Thomas

We have a situation that's causing some annoyance with both our IT Engineers and our Information Governance staff, and its all to do with the DLP alerts to Admins when a user may be breaking our policies. I've looked at the Custom Rules for Admin email…

Hi, How to uninstall Sophos agents on multiple devices using group policy

Can we add CIXA for 20 user license and Cixa xdr for 30 user in one Sophos central portal

And even with 6 or 7 new starts the device still shows the wrong user in central. When I look up the correct user it shows 0 devices in the management studio. The user is local user in windows is logged into their Microsoft account and is synced with…

We run a small licensing application on a server, and the same client runs on student PCs in our media lab. The application named "iLok" started failing a few weeks ago, and after some investigation it is Sophos blocking it. We found by trial and error…

Hello, I am currently using Sophos Endpoint Protection Intercept X Advanced in the company network. Is it possible with Endpoint Protection to block USB interfaces for storage media such as USB sticks or external hard drives? So that only approved USB…

Hi good morning, I have an issue when I download the Applications Most Frequently Blocked especifically for one day. It downloads but it doesnt show information.

I have a problem at installation on a PC, we have installed the endpoint in other PCs in the same network without problems. The installation starts and seems to work correctly, it reaches the MR/UC server and completes stage 1, then it starts working…

Hello, I have a Windows 11 Pro Client that has a Sophos Endpoint Protection Client installed. But in Sophos Central the client is not listed any more. When I start an update on the client manually, there comes an error. I can´t find any way to…

Hey all, This one has been plaguing me for a bit, but have been able to ignore it until now. We have been rolling out Sophos Endpoint Protection, and Sophos Firewalls Switches and AP's across all our sites. However we started noticing these notifications…

Hi, I have read through these forums and also some FAQ's and everything I have tried hasn't worked. The SOPHOS administrator has been unable to recover the key, so this problem has been dumped in my lap. Does anybody have a method they have successfully…

Hello, One of the apps I'm developing is flagged as a low-reputation app, for the following security consideration: Trigger installation (This app can ask Android to install another app). The problem is, that I didn't add a mechanism to install apps,…

We have a client that has Sophos Endpoint Protection deployed, but doesn't have a Sophos Firewall. They want to enable 'SSL/TLS decryption of HTTPS websites', but will enabling it actually do anything if you don't have a firewall CA and a deployed certificate…

Hi, Is there a way to see what update server endpoints are talking to? There used to be a log of the communication that clients had with the update servers or update cache servers, but I can not find it anymore. If anyone can point me in the right…

Hi Everyone, Do we have any news or information on whether this issue will be resolved or not? We have a BIG client of ours that is considering ditching Sophos Endpoint because of this problem... Sophos Central Admin: PrivGuard feature blocks application…

Hello there, How can I run my Sophos AV on a device while in safe mode (Windows 11 Pro)? Which executable file I should click to start scanning against threats? Kind Regards, Damian