• Sophos Central Update Deployment Rings

    itskdog
    itskdog
    Hi everyone, After the Crowdstrike update issues last week, we're conscious that a similar faulty update with Sophos could impact us as well, given all endpoint security software naturally needs kernel-level access to do its job. We're now looking…
    • Answered
    • 4 months ago
    • Sophos Central
    • Discussions
  • Administrator Guide: Sophos Central Application Control using Intercept X Advanced

    Matthew Ritchie
    Matthew Ritchie
    Sophos implements many layers of security, including control policies configurable for your Endpoints protected by Intercept X Advanced. One such control policy that is vital to give attention to is Application Control. The following article is not a…
    • 4 months ago
    • Sophos Endpoint
    • Recommended Reads
  • Sophos Central Login: How to remove QR Code and Authentication App requirement

    Søren Jensen
    Søren Jensen
    Hello all, I have a problem login on to Sophos Central. My username and password is accepted, and so is the email received code and my pin. On the next screen I'm asked to verify my device, presenting a QR code asking me to scan the QR code and enter…
    • Answered
    • 4 months ago
    • Sophos Central
    • Discussions
  • Send Wazuh logs to sophos

    ACE Security Engineer
    ACE Security Engineer
    Our company Ace Money Transfer is using Wazuh as a SIEM and a sophos firewall. We want to send wazuh logs to sophos for it's XDR capabilities. Right now, i am trying the free trial to see if there'a a way to integrate wazuh and send logs to Sophos.
    • 5 months ago
    • Sophos Central
    • Discussions
  • Early Access Program - Sophos Core Agent

    Nikola Djurdjevic1
    Nikola Djurdjevic1
    Is there a way to get latest version for Sophos Core Agent trough Early Access Program ? In Early Access Programs page I couldn't find Core Agent EAP. The closes I could find was New Endpoint Protection Features . I have subscribed for New Endpoint…
    • 5 months ago
    • Sophos Central
    • Discussions
  • Sophos Mobile - Backup/Restore Fully Managed Android Devices

    James Savignac
    James Savignac
    Hello, Apologies if there's articles or blogs about this but I haven't had luck in finding what I'm looking for thus far. We use Microsoft 365 as a tenant and Android devices and have been utilizing full device enrollment to ensure if a device is lost…
    • 5 months ago
    • Sophos Mobile
    • Discussions
  • Installing Paid Applications on Android Enterprise Full Management Device

    Marcello Martino
    Marcello Martino
    We have a mobile phone configured with Android Enterprise Full Management Device, and we need to install a paid application on this device for our president. However, the system does not allow us to use a personal Google account in the Play Store or to…
    • 5 months ago
    • Sophos Mobile
    • Discussions
  • How can I search for a MD5 Hash with Sophos EndPoint

    Hans_Dampf
    Hans_Dampf
    I have a hash like: 6ea2c9276c122222222222f9ae2 i want to search on the clients for this hash. is there a posibility to search with Sophos EP?
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Mobile License Expire

    Miguel Pérez
    Miguel Pérez
    First of all, greetings to all. I've been checking on the forum and I can't find a clear answer. What happens when the license of an Android terminal expires? I understand that you can continue to use it but without being able to remotely manage it…
    • 5 months ago
    • Sophos Mobile
    • Discussions
  • Sophos Central , possible to edit base policies?

    JohnMaA
    JohnMaA
    Hi, Is it possible to edit the base policies, so that we don't have to change a policy manually every time we create a new Customer? Using a Global template forces us to manually go into the settings to add the new customer to the template, so…
    • Answered
    • 5 months ago
    • Sophos Central
    • Discussions
  • all kinds of Sophos endpoint user get other users update notifications.

    ab awal
    ab awal
    All Sophos agent users get a notification ( Access to computer "x" denied because it may be unsafe). This notification gets recently all user, thing is that all users any users get other users notifications.
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Malicious behavior ('Lockdown') prevented

    Andreas Sandner
    Andreas Sandner
    Hello, recently we've had multiple issues that Intercept X prevented installation or execution of software because it suposedly prevented "Lockdown". It likes to block our remote maintainance software because of this, and today I was unable to install…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Malware or potentially unwanted applications in quarantine

    Stuart James
    Stuart James
    This is the most useless message. Where in Central can you view what specific applications are in quarantine? On the rare occasions where it does actually list the file as an alert, you can't even issue an instruction via Central to remove the offending…
    • 5 months ago
    • Sophos Central
    • Discussions
  • Anti-virus protection with Endpoint ?

    Bordeianu Daniel
    Bordeianu Daniel
    Am a bit concerned that the Endpoint trial program I 've installed for a malware scan has uninstalled my antivirus suite (antivirus firewall emails, etc protection). Malware are one thing, antivirus and firewall another. Is my system back on WIndows defender…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Authenticator app QR code

    Bordeianu Daniel
    Bordeianu Daniel
    Hello. Have read about good detection rates on your engine and thought to check with Endpoint a possible ransomware/ransomware situation. First time user, yet to install the trial version, after the email and password are accepted, and that email code…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • File scanning causing very large data files and RAM usage (unpaged pool)

    Jeremy Roberts
    Jeremy Roberts
    We have group of web servers with very large Unpaged Memory used by Sophos. Despite the promise of a fix in the latest agent, all that has happened is the RAM usage gets cleared down on a reboot, it then creeps back up at a rate of 2GB a week. By the…
    • Answered
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • TLD block in Sopho Central

    Damian Kowalik
    Damian Kowalik
    Hello there, I am trying to block TLDs in Sophos Central using Website Management—Add Website Customisation, and instead of putting many domains with a malicious top domain, I would like to be able to block this particular domain. What should I…
    • 5 months ago
    • Sophos Central
    • Discussions
  • Windows 11 ARM

    Anthony Hill
    Anthony Hill
    Does Sophos (Intercept X) work on the New Arm processors for Windows 11 Surface Laptops? If so where do we get the Intercept X download from/for Sophos Central? Thanks.
    • Answered
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Blocking of Custom File type for execution

    Shashank Khamkar
    Shashank Khamkar
    Dear Team, Can we Block Batch file execution or Command Prompt through Sophos Endpoint Protection? If yes then Kindly provide a KB article.
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Sophs Central control

    Nyein Chan Zaw
    Nyein Chan Zaw
    Hi all, I have installed Sophos EP in client and it's possible to control "no internet access and only the website that allow from Sophos Central" ? or can block all http and https from Sophos Central ?
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Can block the port for Endpoint client from Sophos Central ?

    Nyein Chan Zaw
    Nyein Chan Zaw
    Hi all, It's possbile to block the port for Endpoint client from Sophos Central ?
    • Answered
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos DLP Inside file Content Blocking

    Shashank Khamkar
    Shashank Khamkar
    Dear Team, Can we block a content in a file such as adhar card number sent in a file or so.
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • DLP Block message missing

    Matthew Gaston
    Matthew Gaston
    Hi Folks, Currently setting up a DLP policy for my company. The rules we have set up work as expected, for instance the rules we have set up to " Allow transfer if user confirms" successfully prompt the user with a popup that asks them to confirm/ block…
    • Answered
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Purger ou diminuer logs dans C:\ProgramData\Sophosi\Endioint Defense\Date\Event Journals

    guillaume testaniere
    guillaume testaniere
    Bonjour Est il possible de purger ou diminuer la taille des logs dans C:\ProgramData\Sophosi\Endioint Defense\Date\Event Journals Mais pour un seul serveur Quel est l'impact sur la sécurité de ce serveur ? Cordialement
    • 5 months ago
    • Sophos Central
    • Discussions
  • Sophos intercept X advanced

    Vinay A S
    Vinay A S
    When a user has some data on their laptop and attempts to modify or delete it, can Sophos Intercept X Advanced block these actions? Consider an example UserA has some data on their laptop and UserA wants to delete it, can Sophos Intercept X advanced…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
<>