• SSL/TLS Decryption with Smartcard or Certificate based authentication

    mthi0591
    mthi0591
    We are in the process of testing out the SSL/TLS Decryption in our Endpoint policies. I have recently come across an issue with a site our users access that requires a certificate to authenticate properly. I have exempted this site's URL in the global…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Endpoint All Deleted no tamper password

    Hospital Santo Antonio
    Hospital Santo Antonio
    hello, we have a serious problem, all the computers that were managed with the sophos central were deleted, so they didn't update and I have 100 computers that are without management. the problem is that I am missing the tamper password of those computers…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Disable tamper protection but protected device has been removed.

    Kei Mizushima
    Kei Mizushima
    Hi, I have a problem. Currently my license had been expired and I want to disable the tamper protection for my computer, but unfortunately I accidentally removed my computer from the protected device list on Sophos Central. I had tried various method…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • This app has been blocked by your system administrator- How to allow this app on Sophos.

    genesis_genesis
    genesis_genesis
    Hi We have a program that is with a OCRM.exe file extension located on a folder in a PC-1 . From PC-5 windows 10 computer, I created a shortcut pointing to the OCRM.exe. When I click to open this shortcut, it says: This app has been blocked by your…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Tamper Protection Password - unrecognized

    Pietro Guzzetti
    Pietro Guzzetti
    Hello All, I'm encountering an issue on some machine with the following version of Sophos Endpoint, Sophos Endpoint Core 2022.2.1.9 - Sophos Intercept X 2022.1.1.22 : The Software cannot Be unistalled - the Tamper protection provided is not recognized…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • DLP condition is flawed?

    Sophos User6628
    Sophos User6628
    Hello all, I want to ask if anyone has a solution or work around. I have talked to Sophos support and their answer is "not capable" and "cannot cover all the leaks currently". Currently, DLP condition for destination is not really destination. It…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Search event logs by specific event ID

    Erik Alejos Agustí
    Erik Alejos Agustí
    Hello, we would like to have a query to search specific events on Windows from EventID variable. Thanks in advance
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Überwachung von Peripheriegeräten - Ausgenommene Peripheriegeräte

    Henry Kaiser
    Henry Kaiser
    Beim hinzufügen von Ausnahmen kann keine Bemerkung oder ähnliches Hinterlegt werden ... So kann schlecht ein freigegebener USB-Stick bei Verlust zugeordnet werden und wieder aus der Ausnahme gelöscht werden... Im Alten SEC gab es die Möglichkeit bei…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Sophos Central Endpoint Port Blocking

    ehans igno
    ehans igno
    Does anyone know if its possible to apply a policy option via Sophos Central Endpoint (using Intercept X) that can block specific ports from being used on a local endpoint client machine? We have a customer that makes use https://19216811.cam/ of Sophos…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Product not available on lacal machine, Real-time protection i

    dazor
    dazor
    Hello everyone need help for two situations: the products for which we have licenses appear on the management interface (image1). But on the Client machine, the product is missing (image3). I am also facing the following problem: A web application that…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Block All Uploads but Allow Downloads

    tubadave17
    tubadave17
    We are using Intercept X on all of our workstations and I would like to setup a policy where users cannot upload files to any sites. (webmail, online storage, etc.) But I want them to be able to still download from those same sources. Is this possible…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Anyone else seeing issues with Sophos latest WFP changes?

    Andy Martin1
    Andy Martin1
    Please see a comment we got from sophos support: Since our latest update to Sophos Central (2.20.13 - April Release onwards), Sophos Web Control and Web Filtering has received a large overhaul. This is not something we can revert however we've found some…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Overriding Web Category and Risk with web policy

    LHerzog
    LHerzog
    Hi, I was testing a website exclusion in Intercept-X and had a hard time to finnaly get it working. So I wanted to browse to the Sophos Testsite. As expected this was blocked. regardless of http or https used. So I went to Central Global settings…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Licence Expiry

    Test Procloud
    Test Procloud
    Will i still be able to log into the admin console after my licence expires? I just want to make sure i will be able to remove tamper protection from any laptop we havent been able to move over to the new solution before the expire date
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Query all website URL access from User devices (Windows)

    Thai Le Quang
    Thai Le Quang
    Hello, i need to know all website that user access from their devices, can XDR do this? If XDR can do it, please guide me to query. thanks
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Anyone else seeing HTTPS\Inspection issues with Sophos WFP?

    Andy Martin1
    Andy Martin1
    Since our latest update to Sophos Central (2.20.13 - April Release onwards), Sophos Web Control and Web Filtering has received a large overhaul. This is not something we can revert however we've found some Web Filtering products previously used alongside…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • DLP RULES

    Danilo Ferrero
    Danilo Ferrero
    good morning I wanted to know if in the DLP it is possible to add a rule to block folders on a network share? Danilo
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Website blocked notification

    Gavin Quayle
    Gavin Quayle
    Hi, New user to Sophos Central/InterceptX, finding my way around most of it, but a bit puzzled with blocked websites. Using base policies etc, when a user tries to access a site deemed "dodgy" (pornhub.com for instance) they just get a standard network…
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Hi Sophos Team! we are having issue with uploading files when DLP is enabled on endpoint security.

    Sophos User6409
    Sophos User6409
    support.sophos.com/.../KB-000043946
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Query to check file contents

    TheNewGuy
    TheNewGuy
    Hello, I want to have a query to check for possible PII. There is the query to check for metadata such a password.docx or password.txt. Below is what I have so far and this works as long as you have the exact file path and pattern you are looking…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Sophos Query based on file hash

    Arif Aiman
    Arif Aiman
    Hi, Is there any query that find if the files on the device based on hash that we define? Thank you and kind regards.
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Sophos DLP rule block internal network links

    Supporter0711
    Supporter0711
    Dear all, We have following issues with a couple of users - They not able to open a link in Outlook, it doesnt matter if its link to a local or a network file.Most after hours the link opens, somtimes they not able to upload files in the webbrowser…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Endpoint not comunicating to Sophos Central

    Caio Mallmann
    Caio Mallmann
    Ok, so I have some devices on my organization that don't show up in Sophos Central. I've already made some research on how to fix this issue, but there are some concerns: 1 - they've been deleted for more than 90 days, so I cannot recover their passwords…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Laptop not showing in Sophos Central. Cannot uninstall

    Chandler Robinson
    Chandler Robinson
    We have a laptop that has the Sophos Endpoint software installed, but it is not showing up in the Sophos Central Portal. We are trying to uninstall Sophos on this machine. Of course, it is telling us tamper protection needs to be disabled in order to…
    • Answered
    • over 2 years ago
    • Sophos Central
    • Discussions
  • Querying a Registry path, parsing it in CASE...not working.

    Andrew Short1
    Andrew Short1
    Trying to create a Live Query to assess the state of the Windows Firewall via the registry. I started with the "View registry Section" query and modified it to the following. The initial case statement ALWAYS produces the results "Error", even though…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
<>