There's a way to limit the disk usage during sophos antivirus scan? We have machines with always active background programs that open and close communications with other machines, but if they have saturated resources, sometimes errors occur and operators…

Has anyone experienced the Network Threat Protection service seemingly will stop and restart at will across multiple machines? There are a couple devices that it doesn't restart automatically on https://100001.onl/ https://1921681254.mx/ but the alerts…

Hello, which product will be better to use in case of Web control? With the new agent rolling out by the end of a month there should be option to use Web control right on endpoint. Does this means, i should use only one Web control or filtering, combine…

Hello All, What is a quick fix when Sophos Endpoint service fails to start and the endpoint is blocked on LAN and WAN due to security heartbeat? This happens on random PCs especially when the software is updated. How to start the service. …

Hello, I am trying to generate a windows 10 image by sysprep, I install the sophos antivirus with the respective step by step to generate the golden image ( https://support.sophos.com/support/s/article/KB-000035040?language=en_US ) and after this I…

Hi, We have a Global Exclusion set for an executable file. We now no longer want this exclusion to take effect. I can't seem to find a way to delete the exclusion. Can anyone help with this? Many thanks.

I have two endpoints at two totally unrelated clients where Sophos detected Mal/Polazert-A. Sophos is good at telling me about it, but it doesn't give me any options to remove it. Every time the client reboots their computer, they get a popup from Sophos…

In sophos endpoint protection, there was an issue regarding restarting when using the services in windows server 2016. sophos agent in machine shows an error massage. It's shows "some sophos services are not running please contact it"

The Sophos EP installation on a computer of a colleague yesterday screwed up yesterday. It was red in Central and had no Heartbeat. The endpoint showed a log I've just seen for the first time. The english translation is like "Sophos IPS no longer…

When installing this old, legitimate Microsoft file on two different Server 2022 machines: Microsoft Visual C++ 2008 Redistributable Setup v 9.0.30729.5677 https://download.microsoft.com/download/5/D/8/5D8C65CB-C849-4025-8E95-C3966CAFD8AE/vcredist_x86…

Hello all, is there no way to add the instance ID of a device manually? First blocking the stick being a requirement is very unpractical for bigger companies. The documentation of the exemptions is also very bad, after you made an exeption you dont see…

I'm trying to uninstall sophos agents and other modules but stuck at failed and cannot connect to service errors for each and every module . We have deployed another AV solution and both are making the use of workstations impossible.I have tried running…

Hi, I am using Sophos Intercept X, I have a client that does not update (agent) Core Agent 2.19.8 Endpoint Advanced: 10.8.11.1 What amazes me that this is not displayed in red in the dashboard: - / Can you help me to get the message up to date? I get…

I cannot find "\clusterserviceaccount\Local Settings\Temp" directory on a failover cluster in Windows 2012R2. However, in the documentation ( support.sophos.com/.../KB-000033343 provided by Sophos, this directory should have an exclusion rule in Sophos…

Hi, we need to deploy Sophos Intercept X client to all domain workstations, but we need to avoid UAC prompt. Is this possible? Thanks all, Max

Hey I need to check here if the Windows11InstallationAssistant has been realsed as i can not see that in our central portal? Thank you

Hey folks, Does anybody know how and what triggers ransomware attack detection? We have a process via batch script and it calls for GPG.exe encryption on the files. This process are executed via remote workstation, and the target files are from our…

With Sophos endpoint I can wipe a computer remotely

I want to intentionally block a USB Mouse and Keyboard from being plugged in but I don't have the ability to yet. This needs to be a feature that is included in the Peripheral settings of Endpoint Protection

Query to know if a user with Central device encryption has configured his password. I need your help if someone knows how to obtain that information through XDR by a query, we need to know how many computers do not have the password configured in bitlocker…

Hi There, I'm trying to activate BitLocker on USB key, but Sophos Central block the transfert of the file : FVE2.{e40ad34d-dae9-4bc7-95bd-b16218c10f72}.1 As you can see in the screen shot I created a rule in DLP to allow transfert to USB …

Hello, We're using Sophos Central Intercept X in our domain, and would like to add a policy that will prevent our users from running or copying files from external drives, e.g . USB drives. Our goal is to go one step further: we want to create such…

Hi Team, Kindly assist. I uninstalled and reinstalled a Sophos Intercept X Advanced agent on a Domain Controller but then on the reinstall the Settings tab on the Agent dashboard on the DC is enabled though the features were grayed out (the disabled…

According to Sophos KB-000035264 support.sophos.com/.../KB-000035264 it states the following "By default, Sophos Central automatically uses vendor-recommended exclusions for certain widely-used applications. You can also set up your own exclusions in…