• Add an exeption for device control manually + documentation

    Adrian Boehm
    Adrian Boehm
    Hello all, is there no way to add the instance ID of a device manually? First blocking the stick being a requirement is very unpractical for bigger companies. The documentation of the exemptions is also very bad, after you made an exeption you dont see…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • issuee

    miller jhon
    miller jhon
    I'm trying to uninstall sophos agents and other modules but stuck at failed and cannot connect to service errors for each and every module . We have deployed another AV solution and both are making the use of workstations impossible.I have tried running…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Computers out of date

    Shrinik Srinivasa
    Shrinik Srinivasa
    Hi, We're receiving alerts everyday on a regular basis that computers are out of date or have missed updates. What is causing this issue? What can be done to resolve this issue? Please let me know if anyone has any idea. Thanks and Regards…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Sophos Update failing on multiple machines

    Hanif Ahmed
    Hanif Ahmed
    Hi All. I am having an issue with multiple machines failing Sophos update over the weekend. This includes relatively new machines. I am receiving the following error: Failed to install sau: general error. I have tried uninstalling but receiving…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Question about Intercept X on newly installed endpoints

    Brian Straka
    Brian Straka
    Can anyone tell me why my newly provisioned endpoints are going into central with the little blue plus sign like Intercept X is not enabled on them? Perhaps I just don't understand the process or we are deploying an old .exe??? I thought that since we…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • EventID 5038 in Server 2016/2019 with Intercept X Advanced for Server with XDR

    Steffen Heno
    Steffen Heno
    Hello Community, we have several WIndows Server 2016/2019. They have installed Sophos Intercept X Advanced for Server with XDR. After a reboot occurs the eventID 5038. Code integrity determined that the image hash of a file is not valid. The file…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Frequently Asked Questions about DebugView

    FormerMember
    FormerMember
    Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Overview This article provides information about the Microsoft…
    • over 2 years ago
    • Sophos Endpoint
    • Recommended Reads
  • Sophos Network Threat Protection: Installation fails (solved)

    émeric SOULENQ
    émeric SOULENQ
    hello, we have issue on more than 90 PC when we push last 21h1 and 21h2 update The network thread protection installation fail : C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs 2022-02-15T15:06:30.217Z [11800: 4260] E DLL verification…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • The Squirrelwaffle Incident Guide

    PeterM
    PeterM
    Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Squirrelwaffle is a malicious dropper or loader used to deliver…
    • over 2 years ago
    • Sophos Endpoint
    • Recommended Reads
  • Sophos IPS no longer relevant for integrity status

    LHerzog
    LHerzog
    The Sophos EP installation on a computer of a colleague yesterday screwed up yesterday. It was red in Central and had no Heartbeat. The endpoint showed a log I've just seen for the first time. The english translation is like "Sophos IPS no longer…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Prevent executable files (*.exe,*.bat,*.com,...) from running on external drives

    Robert Fraungruber
    Robert Fraungruber
    Hi there, we're using Sophos Central Intercept X in our domain and want to add a policy, that prevents our users to run or copy files from e.g. usb drives. We want even go one stop further: we want to create such a rule in general, but want to allow…
    • over 3 years ago
    • Sophos Endpoint
    • Discussions
  • Trial license (XDR) instead of licensed version (Advanced)

    fhau
    fhau
    Dear all, I'm trying to set up purchased licenses ("Intercept Advanced"). However, running the local installer automatically selects "Intercept X Advanced with XDR" out from the trial license pool. I understand that licenses are selected based on…
    • over 3 years ago
    • Sophos Endpoint
    • Discussions
  • Office 365 Apps (Word) issues saving since 2.20.4.1 update

    Axnfell
    Axnfell
    We have a number of users who have started reporting problems saving documents from Microsoft Word since 18th November. Our RMM tool reported Sophos was updated to 2.20.4.1 on 18th November Users started reporting problems with MS Word on the 18th…
    • over 3 years ago
    • Sophos Endpoint
    • Discussions
  • The Sophos Endpoint/InterceptX File Scanner Service frequently fails to start

    albertos wremser
    albertos wremser
    hey, Endpoint/InterceptX is a product we use, and we have had sophos file scanner issues, but never as bad as they are now . We've restarted the service almost 20 times today between myself and another IT team member on different Win10 machines as the…
    • over 3 years ago
    • Sophos Endpoint
    • Discussions
  • Sophos endpoint UI notification

    Thomas Denton
    Thomas Denton
    Hello I m getting a notification appear to allow Sophos endpoint Ui Server. Despite having configuration profiles configured as per below https://community.sophos.com/intercept-x-endpoint/f/recommended-reads/116397/sophos-mac-endpoint-how.. The install…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Silent install Windows client

    Giovalex
    Giovalex
    Hi, we need to deploy Sophos Intercept X client to all domain workstations, but we need to avoid UAC prompt. Is this possible? Thanks all, Max
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Windows11InstallationAssistant

    Sampre
    Sampre
    Hey I need to check here if the Windows11InstallationAssistant has been realsed as i can not see that in our central portal? Thank you
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • CryptoGuard Ransomware Detection

    kheir fernandez
    kheir fernandez
    Hey folks, Does anybody know how and what triggers ransomware attack detection? We have a process via batch script and it calls for GPG.exe encryption on the files. This process are executed via remote workstation, and the target files are from our…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Delete remote windows

    Angel Diaz
    Angel Diaz
    With Sophos endpoint I can wipe a computer remotely
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Intentionally Block USB Mouse and Keyboard

    Administrator User579
    Administrator User579
    I want to intentionally block a USB Mouse and Keyboard from being plugged in but I don't have the ability to yet. This needs to be a feature that is included in the Peripheral settings of Endpoint Protection
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • In over view of Device , cant see OS win 11 after upgrade also.

    NOC GSG Telco
    NOC GSG Telco
    In a Sophos Console We can not see the the upgraded OS in Device dashboard. This is Laptop is upgraded to Windows 11 , but cant see in dashboard. We have to open it to then it shows Win 11, Even we tried in reports also its showing Windows 10 Pro only…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • BitLocker blocked : file FVE2.{e40ad34d-dae9-4bc7-95bd-b16218c10f72}.1 blocked

    Kader-Mtl
    Kader-Mtl
    Hi There, I'm trying to activate BitLocker on USB key, but Sophos Central block the transfert of the file : FVE2.{e40ad34d-dae9-4bc7-95bd-b16218c10f72}.1 As you can see in the screen shot I created a rule in DLP to allow transfert to USB …
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Exe files (*.exe, *.bat, *.com, ...) should not be executed on an external drive

    osrsem keram
    osrsem keram
    Hello, We're using Sophos Central Intercept X in our domain, and would like to add a policy that will prevent our users from running or copying files from external drives, e.g . USB drives. Our goal is to go one step further: we want to create such…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Intercept X advanced for Server with Tamper Protection Disabled when installed

    Kayode_Odeyinka
    Kayode_Odeyinka
    Hi Team, Kindly assist. I uninstalled and reinstalled a Sophos Intercept X Advanced agent on a Domain Controller but then on the reinstall the Settings tab on the Agent dashboard on the DC is enabled though the features were grayed out (the disabled…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Cannot find bitlocker recovery key

    Aburime Ojeh-Oziegbe1
    Aburime Ojeh-Oziegbe1
    We have a system with Sophos Device Encryption enabled. The system requested for a recovery key which we found on Sophos central. However, after entering the recovery key, the system restarted and asked for the recovery key again with the same recovery…
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
<>