a user has been given a new computer. the old computer has been assigned to another user. two computers are now assigned to the current user. how can i remove the one that is no longer used from the old computer, since it is no longer in use? does anyone…

Hello, We have a Sophos Central account with about 150 computers and 25 servers. XDR is used. The licences have currently been active for about 8 days, but no detections have been displayed so far. Could it be that nothing has been detected so far and…

I want to make a report of detection from sophos central, but there is no such a button to export those kind of data. I need 'detection rule', 'date', 'category', 'severity' contents in this report. Someone know how to make this kind of report…

Hi all, i've got a false-positive outbreak detected on one fileserver. There're around 100 Items in Quarantine - alerts spread over 6 pages in Events-Section in central. i went through that list multiple times but was able to release 95 elements from…

Hi! I just found a bug in the Sophos Central dashboard and could not find it in the known issues list. Here's how to replicate the issue: 1. Create an exclusion of the type "Exploit mitigation", choose an application and deactivate at least one of…

As residents of Saudi Arabia, SAMA provides us with YARA rules for threat detection. How can we effectively create and implement our own query within Sophos Central to scan for these YARA rules? What are the best practices and challenges associated…

Starting today around noon (Pacific time) we stopped being able to setup new workstations in Sophos Central. The logs (on multiple machines) show this: 2024-08-19T22:39:44.0627204Z INFO : Opening connection to mcs2-cloudstation-us-west-2.prod.hydra…

Recently, I've noticed a troubling increase in false positives from Sophos Central that are impacting our workflow significantly. Legitimate files and applications are being flagged as threats, causing unnecessary disruptions and delays. This issue seems…

Hello community, How can I decontrol a specified category for a user or user group ? Best regards, Thomas

We have a situation that's causing some annoyance with both our IT Engineers and our Information Governance staff, and its all to do with the DLP alerts to Admins when a user may be breaking our policies. I've looked at the Custom Rules for Admin email…

Can we add CIXA for 20 user license and Cixa xdr for 30 user in one Sophos central portal

And even with 6 or 7 new starts the device still shows the wrong user in central. When I look up the correct user it shows 0 devices in the management studio. The user is local user in windows is logged into their Microsoft account and is synced with…

Is there a way to get latest version for Sophos Core Agent trough Early Access Program ? In Early Access Programs page I couldn't find Core Agent EAP. The closes I could find was New Endpoint Protection Features . I have subscribed for New Endpoint…

Hello Sophos Team, I was wondering if our license is automatically renewed or manual (buy new license code). As the picture shows the expiration date is Sep 4/2024, what would happen then? Thanks in advance.

Hi, Is it possible to edit the base policies, so that we don't have to change a policy manually every time we create a new Customer? Using a Global template forces us to manually go into the settings to add the new customer to the template, so…

Hello there, I am trying to block TLDs in Sophos Central using Website Management—Add Website Customisation, and instead of putting many domains with a malicious top domain, I would like to be able to block this particular domain. What should I…

Dears, We are facing a problem finding some users and their computers in SHOPOS portal under computers or under "Restore deleted devices and recover Tamper Protection passwords" even though SHOPOS endpoint is installed in those devices.

Greetings all IPS service is not starting on an A computer which you can see on this snapshot bellow, how to overcome this error message.

Hello, We work with a Sophos Central Web Policy in general the download of .exe files is not allowed. Is it possible to exclude certain files/programs from this policy so that they can be downloaded? Thank You!

As the title states, this is somewhat concerning this hasn't been rolled out yet but there doesn't appear to be any sub category for AI/GPT usage in web control policy. AI usage is becoming increasingly prevalent for businesses, while also becoming increasingly…

Hello Everyone Can i allow an application using the sha256 in Sophos central, is it possible, client using intercept x with XDR. Can you please help?

Hello everyone, I have a question about the creation of threat exceptions. Suppose I have the following message in the centre. How can I set an exception there so that it can be ignored? Can anyone give me a tip? Thank you very much!

We have a terminal server running Sophos Intercept X Essentials. This now also reported a detected manipulation of the browser and provided corresponding information. How do you deal with this? Do you always report these reports to the Sophos team or…

Hello there, I'd want to ask the Sophos community if I can block uncategorized websites in Sophs Central? Many of our users appear to browse uncategorized websites, which I am unsure how to prevent. Kind regards, Damian

Hi, Our client is having endpoint and server with XDR, Please let us know if there is a query or report available for User password failed attempt on Windows MAC and Linux systems. Also is there an option for sending an alert for this to central…