I have one computer that logs a USB Peripheral Block Event locally on the Sophos Agent when a USB printer is plugged in, but the event does not get reported to the Central Management Console. The Sophos client is up to date and the computer has been rebooted…

Hi, for a while now our users have been complaining about an application control policy notification "Microsoft Bluetooth File Transfer Tool has been blocked by your administrator". From my testing this will appear multiple times daily. This is being…

Hi all, we want to allow an application by the vendor certificate cause this appilcation uses some powershell stuff. Now we have the problem that we can only do this, when the application is getting detected as an PUA. But this is not the…

Good afternoon, Is there a category to stop file sharing websites similar to there is one for "Gambling" i.e. OneDrive, but then an allow list so we can allow our Business OneDrive? Thanks and kind regards,

Hello Is only one policy applied at a time e.g. under Server Protection? If I adjust the base policy, for example, do I have to adjust the cloned policies as well? Is it not possible to apply multiple policies to one server? I expected the exceptions…

Is there a way to see an overview of the current installed Endpoint Version over all servers by dashboard instead of clicking one server by another? I can't find any report or dashboard for this. I got a messae that server did not received to latest…

Hello, when Intercept-X Web filtering policies will be as those on SFOS and synchronized? DI

I created a policy and a rule to monitor files being transferred to external storage devices. However, it seems the policy only works after a reboot. Is this normal? I haven't seen this with other polices; just the DLP.

We erase all excluded USB drives every 6 months and force our users to Reregister them with us. It would be VERY HELPFUL to have filter functions for the list so we can mark more devices at once and erase them. As is we have to scroll down und erase…

Is there any way to allow only Audio Devices through Bluetooth in device control?

All, I have a new and recent PUA outbreak for almost any .ZIP file on many systems on our network. These files have been on these drives for over two years. Many different files. Sme are ZIP files of old software that has been archived for project…

We have an issue where PCs are losing connection to Sophos Central and it shows them as not checking in any longer. Sophos is still running on the endpoints and updating. Sophos support is saying there is DNS issues that are causing machines to not be…

I have a web control on the Sophos firewall for the users in the office. Bud is a option for users not in the office to use Endpoint Protection - Policies - Web Control form central Now I want the option when in the office use the firewall web and out…

Hi, I have an aplication solution that is builded in Blazor WebAssembly, this one download DLL on the web navigator but Sophos block it with message: " 'zeus.mydomain.local/.../ExcelNumberFormat.dll' blocked due to filetype 'Windows Library File (dll…

Hi, I have a problem. Currently my license had been expired and I want to disable the tamper protection for my computer, but unfortunately I accidentally removed my computer from the protected device list on Sophos Central. I had tried various method…

Hi all, Anyone can help me to check my concern about my deployment scenarios with Sophos Central server base deployment? 1. Corp Branch has an internet 2. OT Branch without Internet and have many workstations 3. The workstation of the OT branch…

Hello All, I'm encountering an issue on some machine with the following version of Sophos Endpoint, Sophos Endpoint Core 2022.2.1.9 - Sophos Intercept X 2022.1.1.22 : The Software cannot Be unistalled - the Tamper protection provided is not recognized…

Hi We have a program that is with a OCRM.exe file extension located on a folder in a PC-1 . From PC-5 windows 10 computer, I created a shortcut pointing to the OCRM.exe. When I click to open this shortcut, it says: This app has been blocked by your…

Hello, We have a SQL Server running SentryOne and the entire time the Sophos File Scanner causes the CPU usage to run at 50-60% making the server stay at 100%. I killed the File Scanner and then SentryOne spiked to 50-60%. After this I started the…

Hi all, I got an alert from my Sophos Central saying that "Safe Browsing detected browser Google Chrome has been compromised". I clicked on the details and not much were provided. May I know how to mitigate this problem https://19216811.cam/ . Thank…

Good Morning, One of the applications we use in our organisation has started to be impacted by Sophos Endpoint Agent. I have the following error inside the SED logs... 2022-08-24T09:25:56.232Z SED Comms Error Count: 1 Process denied authorization…

The Sophos Central Anti-Virus for Linux client is end of life July 2023. The replacement for this is the Server Protection client. Can anyone point me to a document that describes the migration from one to the other? Can we install the new client which…

Beim hinzufügen von Ausnahmen kann keine Bemerkung oder ähnliches Hinterlegt werden ... So kann schlecht ein freigegebener USB-Stick bei Verlust zugeordnet werden und wieder aus der Ausnahme gelöscht werden... Im Alten SEC gab es die Möglichkeit bei…

Does anyone know if its possible to apply a policy option via Sophos Central Endpoint (using Intercept X) that can block specific ports from being used on a local endpoint client machine? We have a customer that makes use https://19216811.cam/ of Sophos…

Hello everyone need help for two situations: the products for which we have licenses appear on the management interface (image1). But on the Client machine, the product is missing (image3). I am also facing the following problem: A web application that…