License Transfer events should appear in the audit log. Currently it doesn't.

Hi folks, I know this should have been commented on during the EAP and I missed the opportunity. I was exploring the firewall reporting after having had a fix applied to my CM account earlier today and found that there is no email or application reporting…

Hi, we have our default " Base Policy - Update Management " policy which is applied to most of our endpoints set to "Recommended" software package versions. We would like to change this to latest FTS and leave the latest "Recommended" package setting…

Hi folks, I cannot find a way of restore the CM to the whiter background, there current black is not user friendly in my opinion. The colour scheme looks fantastic with a black background but colour schemes do not always make usage enjoyable. Ian…

hello I tried to create Sophos central account to try Sophos XG Firewall trial, But I never get email to activate my account. my email is GMAIL, I got trial serial number , But I cant create sophos central account to claim my Trial. thanks alot

Dear all, There are a large number of fake "whatsapp web" pages at the top of Google search currently. I saw that the IP range is: 104.21.x.x or the URL is https://uaa.xxxxxxxx / https://wh9.xxxxxxxx Is there a more effective to block the IP range…

Hello all, I am trying to enforce a Peripheral Control : Device policy on a Linux Machine, so that when I plug in a USB, it allows the user to read it, but not write on it. I created the policy under Server Protection, but it is still allowing me to…

Hello, In my domain, standard domain users are not able to install a program. But there are some programs that doesnt require admin rights to be installed. I was wondering if i can block them with Sophos. I have tried application block but for that…

I want to exclude the following (example) from real-time scanning: This directory ( 26e9f183-6e80-4436-8461-a67d55c5e4b1) is randomized within the user's profile temp directory c:\Users\testuser\Temp\26e9f183-6e80-4436-8461-a67d55c5e4b1 These files…

Hello Team, We are facing login challenges with Sophos Central Login

Scenario - Attacker has made into a system and now wants to kill \stop the AV but is tamper locked. From SIEM perspective to Monitor such events what logs can be shipped from the Event viewer? or from Sophos log directories?

Hello, I have an issue with migrating devices to another organizational unit in Sophos Central. I've tried using Postman for this. It works when I want to move all devices from one unit to another, but when I try to move only a specific group of devices…

Hi, today all access points (myself and customers) are marked as offline in Sophos Central wireless but thankfully are still working. Are there any troubles in central (EU)?

Hallo, der Report zu Sophos funktioniert soweit. Leider geht es nicht bei manchen öffentlichen Ordnern. Mein Benutzer hat Senderechte und ist Besitzer dieses Ordners. Wenn man dann "An Sophos senden" klickt, kommt die Meldung: Sie können…

Hello to all , i have an error when try to manage firrewall from central it give me " the firewall is not responding to the login request as fast as expected. please wait a while and try again, or check that the firewall is not experiencing any internet…

Hello Team, Could you please share the Sophos Central CIS Benchmarks pdf for hardening Sophos Central?

Hi All, We have application control currently set to block Microsoft WSH WScripts, and want to keep it that way. However we have a VBS script that uses Wscript that ideally we want to exclude, so it can be run on endpoints without disabling application…

Sophos Central is telling me we have a machine with Tamper Protection off but it can't show me which one and (click on device in the report and it show me a list of machines with any protection off but it's a list of zero machines. Click automatically…

Service unavailable or 502 Bad Gateway when calling https://central.sophos.com Germany region. Some devices do not get Heartbeat. Any known issues with Central? Status page says: all fine

Good Day, We've had some instances where either Sophos protection service or Network protection service might not start up. This cause the computer to become Isolated but we cannot un-Isolate unless we restart or use Admin rights to start the service…

I am testing the Endpoint Protection and Server Protection EAP. I have downloaded the server protection and deployed it on my home DNS server which is running on Ubuntu. It has installed successfully and is registered in Sophos Central in the Server…

Our PSA sync to Connectwise is working perfectly for all products except MDR complete. Only "Central Managed Detection and Response Complete Server" is syncing, except when I run a sync I see that line item briefly change to "Central Managed Detection…

We onboarded a new client with a large Azure list of users. The tenant sync with on prem AD and they sync everything. I am trying to get my head around Sophos syncing based on Group ID or group filter. We really only need about 50 mb's synced. The way…

Hallo zusammen, habe leider nichts gefunden und muss euch fragen. Kann man in der Central eine Benachrichtigung einstellen, wenn an der Konfiguration etwas geändert wurde (durch einen 2. Admin z.b.) Ich sehe es in der Central im Überwachungsprotokoll…