• RE: Blocking Controlled Items Prompts for Problems

    ong! L
    ong! L
    One more question, how to customize the tamper protection password?
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Lockdown eclusion for one specifig *.exe

    NXKI
    NXKI
    Hello all, I need help with something I struggle for some weeks now. Sophos is currently blocking some users action with a lockdown event for a program we use. I whitelisted the detected lockdown event from the event log (Exclude this Detection…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Debugging in Lazarus/fpc is slowed down by HitmanPro.Alert service

    Domenico Mammola
    Domenico Mammola
    Hello, starting from today (27/08/2024) debugging in Lazarus ( https://www.lazarus-ide.org/ ) with Free Pascal Compiler ( https://www.freepascal.org/ ) as backend is getting tremendously slow. If I disable the HitmanPro.Alert service everything runs…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Microsoft Skype high cpu usage with Sophos Endpoint

    MysteriousDT
    MysteriousDT
    Hi! I noticed (about since 2 weeks) Microsoft Skype running in background, periodicly causes high CPU usage with Sophos Endpoint ( Sophos File Scanner Process ). Is there any other people here who experienced this?
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Editing exclusions leads to deletion - is this a known bug?

    Björn Vermöhlen
    Björn Vermöhlen
    Hi! I just found a bug in the Sophos Central dashboard and could not find it in the known issues list. Here's how to replicate the issue: 1. Create an exclusion of the type "Exploit mitigation", choose an application and deactivate at least one of…
    • Answered
    • 3 months ago
    • Sophos Central
    • Discussions
  • Sophos Central + YARA

    Mansoor Ahmad
    Mansoor Ahmad
    As residents of Saudi Arabia, SAMA provides us with YARA rules for threat detection. How can we effectively create and implement our own query within Sophos Central to scan for these YARA rules? What are the best practices and challenges associated…
    • 3 months ago
    • Sophos Central
    • Discussions
  • suitable product for scanning files, folders on RHEL with no internet connectivity

    Kumar Bavandla
    Kumar Bavandla
    Hello We are looking for a suitable Sophos product for our usecase. Have gone through the documentation, however would like to confirm below: Usecase: a. System is RHEL7.9 and RHEL9 b. Looking for an on demand scan capability to scan files/folder…
    • Answered
    • 3 months ago
    • Sophos Central
    • Discussions
  • Are you not going to update your machine learning engine?

    ong! L
    ong! L
    https://docs.sophos.com/releasenotes/index.html?productGroupID=esg&productID=sesc_interceptx&versionID=allVersions The last update was in 2021, what are you doing?
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos File Scanner is using around 80% of RAM

    Akito Galicia
    Akito Galicia
    sdu-feedback.sophos.com/.../8411bb8c-c089-47fa-a58a-761c3367caa5_2024-08-21-00-29-40.zip
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • MacOS Sophos updates failing - you don’t have permission to access “CID”

    LHerzog
    LHerzog
    We have an increasing number of devices that are outdating. While we cannot really see issues on the endpoints, and Central shows most of the Macs as nice and green, deeper in the Central logs we see a bunch of strange update errors like: Low,"2024…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Application Control and Installing Intune Management Extension

    Monkster
    Monkster
    Hi, We've recently moved to a hybrid setup for our Windows devices (local active and Intune). Many devices have successfully fully setup but most have not. They are registered with Intune and show compliance, however we have found that those not working…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Endpoint UI not installing

    Ibrahim Shaihan
    Ibrahim Shaihan
    Hi i got this error while trying to install sophos agent.
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • macOS - Sophos Endpoint Protection - Real-time protection deactivated

    Patrice Großkreuz
    Patrice Großkreuz
    Hello, I have a Macbook Pro (2019 Intel) with macOS 14.6.1 (Build23G93) with Sophos Endpoint 2024.2.0.35 in Sophos Central. On this endpoint, real-time protection is deactivated from time to time, without any influences. So far, a scan or an update…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sudden Increase in False Positives from Sophos Central — Need Immediate Assistance

    Anas Rez
    Anas Rez
    Recently, I've noticed a troubling increase in false positives from Sophos Central that are impacting our workflow significantly. Legitimate files and applications are being flagged as threats, causing unnecessary disruptions and delays. This issue seems…
    • 3 months ago
    • Sophos Central
    • Discussions
  • Requested trial but no MacOS installers

    Jimmy Huijbrechts
    Jimmy Huijbrechts
    I requested a trial to Sophos Central to try it out on all our macbooks before deciding on a purchase, now I am logged in to central but do not see the macos installer, only the windows ones. Since we only have literally 1 Windows machine, this is of…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Endpoint Installation bleibt hängen

    Ardit Latifaj
    Ardit Latifaj
    Hallo, ich habe ein Problem mit der Installation der kundenspezifischen .exe-Datei, die ich aus dem Sophos Central des Kunden herunterlade. Während des Setups wird das Gerät erfolgreich in Sophos Central registriert und der Download verläuft reibungslos…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Improvement suggestion for Peripheral Control - Add note/remark

    Rafael Sardinha
    Rafael Sardinha
    Hello, I would like to suggest an improvement to the Peripheral Control Policy by adding a note/comment field where we can enter a text justifying the exception. I have “old” exceptions for USB sticks/disks that I can't remember what/who they were…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Finding where the domain users group added to the remote desktop users local group

    Nandha
    Nandha
    Hi, Is there any osquery to get all the domain-joined machines where the "Domain Users" group is added to the "Remote Desktop Users" local group?
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Duplicate Device Detection

    Sophos User1088
    Sophos User1088
    Hi, We have some devices detected as cloned devices by Sophos Central. Old devices last communication time stamp practically same as new device install time. One of them had been cloned twice in last 2 days (3 device copies now). Thanks in advance…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos File Scanner high CPU usage after Computer off for several hours

    LHerzog
    LHerzog
    I have noticed my own computer (a quite fast machine, a HP Elitebook with i7 Gen13, 16GB RAM, Gen4 NVME SSD) feeling terribly slow when turning it on in the morning after being off for more than 10h. Program starts and reaction time is very sluggy for…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos blocking "iLok" licensing application

    Josh Rogalski
    Josh Rogalski
    We run a small licensing application on a server, and the same client runs on student PCs in our media lab. The application named "iLok" started failing a few weeks ago, and after some investigation it is Sophos blocking it. We found by trial and error…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos installation using RMM on MacOS

    JohnMaA
    JohnMaA
    Hi, I'm trying to automate Sophos Central installation via NinjaRMM. For Windows, I'm able to use Installed Software as a condition as described in the support guide: Create a Deployment Policy However, I'm not sure what condition is best to use…
    • 4 months ago
    • Sophos Endpoint
    • Discussions
  • Blocking USB storage devices with endpoint protection?

    Lothar Kruse
    Lothar Kruse
    Hello, I am currently using Sophos Endpoint Protection Intercept X Advanced in the company network. Is it possible with Endpoint Protection to block USB interfaces for storage media such as USB sticks or external hard drives? So that only approved USB…
    • 4 months ago
    • Sophos Endpoint
    • Discussions
  • Debugging in Delphi is slow

    Sophos User611
    Sophos User611
    If you use the sophos central ednpoint agent on a windows 10 / 11 machine debegging in borland / embarcadero delphi is extremely slow. This workarround works: sophos hitman pro alert und borland delphi debugging extrem lamngsam But: This MR expieres…
    • 4 months ago
    • Sophos Endpoint
    • Discussions
  • Error downloading/running stage 2: Setup program failed with code: 1

    CarlosLS
    CarlosLS
    I have a problem at installation on a PC, we have installed the endpoint in other PCs in the same network without problems. The installation starts and seems to work correctly, it reaches the MR/UC server and completes stage 1, then it starts working…
    • 4 months ago
    • Sophos Endpoint
    • Discussions
<>