Hi there, we're using Sophos Central Intercept X in our domain and want to add a policy, that prevents our users to run or copy files from e.g. usb drives. We want even go one stop further: we want to create such a rule in general, but want to allow…

I using [Intercept X Advanced for Server] for AWS auto-scaling EC2. Until last year, when a new EC2 instance was added to the auto-scaling group, the specified policy was automatically set. However, it will not be possible after this year. The new…

Nicolás: Good Day, I have a question, in the Web Control Policy I have the WhatsApp web allowed but in some cases it does not take the permission and blocks it ERR_SSL_PROTOCOL_ERROR Even if a manual update is done, it does not take the permissions, it…

Hi , My problem is that i want to authorize a website wich is : www.deepl.com , i have many computers where the policy is working fine on them but for about 20 PC it don't work . i can't understand why . let me show you the pictures . https://ibb.co…

Hi Community, I have just finished migrating clients from Sophos on-premise management to Sophos central; the license we use is Intercept X Advanced. According to Sophos Central the Web-Control Policy I created is used for our domain-users. However…

Hello There is an issue with missing instance ID of mobile phones in Sophos, which makes impossible to effectively manage them. I see windows is finding instance ID of apple iPhone correctly: I think there could ba a problem with string which…

Hello Community, In the WebControl policys we have the options for the risky file types. As default setting, I want that my users are getting a warn page when they are downloading a Windows Executable. (or if they are loading in the background of…

Dear Community, I have a dilemma about controlled updates and Sophos Central's update management policy. I describe the case: In my Sophos Central console, exactly in controlled updates, I have them paused, since I have outdated Windows computers…

Hi, if i have an application control policy to block an application, but then add a policy to allow it for a superuser can that application then be run while logged in as a normal user, but with the application being launched using Run As to run as the…

Hello good morning, I have a problem with my computers when trying to project on a wireless screen, my computers have Sophos Intercept, Sophos mobile used this for the remote erase issue, and they go to the internet through the XG-230. If I connect a…

We have more and more laptops having 'Error: Interrupted system call' while run brew upgrade on macOS BigSur. I switched off Real Time Scanning > File on Sophos endpoint, then enduser could do brew upgrade successfully. Since Real Time Scanning…

All of our users (AD) can work with any endpoint server or computer, through remnote desktop or Citrix, all of them are protected throught Sophos Intercept X. But I don't know if there is a centralized place to manage all my Sophos Central policies without…

Hi, i had a case opened at the sophos support regarding my problem and the fix after two weeks was to disable peripheral control. Maybe someone has a better solution for this because i think there must be one Problem is: Microsoft FSLogix Profile…

Hello everyone, I have some questions regarding Sophos Central Computer groups: - Is it possible for a computer or server be part on 2 or more groups at the same time? - Is it possible to create some kind of automatic group assignation rule…

My Baseline Application Policy policy has various categories blocked. Works well. Now I want some IT team members to have access to a few apps that are blocked by the Baselines Application Policy. So, do I either a) clone the Baseline policy, unselect…

Hi, is there an option to block all removable media unless the data is encrypted. for example filevault or bitlocker.? currently testing the policy, Removable storage -> set to block. all removable media is blocked: this is ok so far The USB…

Hi All, On October 21, 2018, we released a policy update for Macs, which updated the strength of the updating password encryption. This has resulted in some Macs reporting Policy Non-Compliance: Updating, as the systems took in the new encryption. The…

Hallo, wir haben in den Server Protection Richtlinien beim WebControl einige Seiten mit Warnhinweisen versehen. Diese werden beim ersten Aufruf der Seite auch ordentlich angezeigt. Beim nächsten Aufruf aber nicht mehr, bis der Browsercache gelöscht…

So I have a bunch of alerts on sophos central from devices that have been deleted, so when i click on the device it says that the device has been deleted, so I figured that maybe reinstalling endpoint on that device will somehow fix it, turns out it didn…

The RCA component in the Sophos EDB console is a great feature, but can we trust the analysis? We've got 100s of endpoints on which the PUAs and malwares are detected and 100s of tickets generated in the ticketing tool. 1. Do we have to collect…

I have logged a ticket with sophos but thought id ask if anyone else has a work around as sophos say its apple's design fault. I have created a USB policy (for staff only to be read only with some exceptions to R&W - targeted at one test user for…

We use MFA to keep the access to sophos central safe. When i want to sync my local AD to Sophos central I have to use a user account with access to sophos central. When I use one of our admin accounts (With MFA) the credentials are wrong When I…

I posted this elsewhere, scheduled scanning does not seem to be running in Sophos Central. All computers are scheduled to scan at 9:00 pm on Friday. That policy is still enabled No scans have run. What could be the problem. This worked in the past until…

I have been installing Sophos Endpoint Security and control for years and noted that the listing on "Vulnerable and Executable" file types (Extensions) was visible in the client when you have local amin rights. This file extension list was contained in…

Hi, When excluding files & folders in Sophos Central, do processes that launch from inside that folder also get excluded?? For example, if we exclude the Visual Studio folder ( %programfiles(x86)%\Microsoft Visual Studio\ ), does this simply mean…