We have performance issue with Citrix Intercept installed on VDI Citrix desktops. When the users open files (office, pdf, etc...) I see Sophos file scanner that use 60 and more cpu every time (I know that Sophos have to do the scan of the file...).…

Hello, For some reason Sophos categorize one of our very serious domain as "provocative attire" so I put an exception to this domain as I already made for some other blocked sites we met. But this time it has been six hours and still nothing when for…

I want to allow an application which are detected with Sophos central, but in the event details tab is not showing allow applications option. even though when I allow the detected path from global settings allow applications then the application is not…

Hi, Hopefully a simple question. Today I am seeing an alert for a malware detection for a customer, but the alert is just saying "Requires Attention", rather than something like manual cleanup required. Does this just mean I need to have a look at what…

Hi fellas, is it possible to use the data from a device restriction policy set up in a SEC during migration to Sophos Central? (Export - Import....) GreeetNx Harry

Hello everyone. I am about to deploy more than 1000 endpoints in my network through GPO, however in the tests that I perform the installation takes too long. The option "Choose components" does not give many details, that is not helping me. Is there a…

We have an internal approved application that we've been running for about a year. Sometime last month Sophos Central started blocking it as "CryptoGuard". We have it added in Allowed Applications as well as Global Exclusions. Per this post 3 years ago…

Made a copy of Threat Protection added 2 exclusions C:\ProgramData\SolidCast\ C:\ ProgramData\SolidCast\FixedVolumeFillUtility.exe Yet every now and then we get this: Generic ML PUA detected at C:\ProgramData\SolidCast\FixedVolumeFillUtility…

We have a Base Policy for Web Control, that every user picks up. In the Website Management, we have websites like DropBox added and tagged to block in the policy. I have tried numerous links and websites including DropBox, and it blocks as expected…

We are in the process of removing Sophos (we only used it for device encryption) from about 1000 computers. I ran into two devices so far that had apparently been deleted from Sophos Central by mistake https://tutuappx.com/ more than 90 days ago. Now…

Does anyone have any experience in remotely fixing computers that are reporting to Sophos Central with an alert of "Failed to Protect Computer" or showing a bad status with "Services Missing or not Running"? When I say remotely, these are computers spread…

Hi All, A user has asked for a printer/scanner to be unblocked via device control. At first the model ID of the device was shown in the events of both Endpoint and Central and I was able to add an exemption for the device. However, this only unblocked…

Community, This is more of a FYI then a question. But would like to request FQDN be added to "REMOTE ADDRESS" in windows isolation, and documentation updated for windows isolation exceptions Windows Isolation Exceptions. Requirements . Direction and…

Dears , I make a list of computer that showing in Sophos central website and compare it with computer in ad manager and I found a list of computers that not showing in Sophos central. when I checked those computer I saw that Sophos endpoint are…

Hello, I'd like to implement the Peripheral Control policy on Sophos Central and I need to know what is update time cycle to the endpoints (intercept X). I need to know after I add an exception to a USB device what's the maximum time to be applied on…

hi team you know 2 months ago i got this error on a server. " Failed to install ESH64: general error." I uninstalled the agent, cleared the logs, and reinstalled it, but the error persists. all services are green and running... security patches and…

Hi There Everyone, I'm stuck at this Sophos Endpoint Installation on Windows 10 Pro, could anyone assist on this issue attached with installation log and error picture SophosCloudInstaller_20221122_055507(amy-sales).log

I want to block the download from google driver but the user is still connected to google to see the data. I just want to make sure to download files from google drive web

Does anyone know if you can uninstall and then install Sophos Agent by console?

I have one computer that logs a USB Peripheral Block Event locally on the Sophos Agent when a USB printer is plugged in, but the event does not get reported to the Central Management Console. The Sophos client is up to date and the computer has been rebooted…

Hi, for a while now our users have been complaining about an application control policy notification "Microsoft Bluetooth File Transfer Tool has been blocked by your administrator". From my testing this will appear multiple times daily. This is being…

Hi all, we want to allow an application by the vendor certificate cause this appilcation uses some powershell stuff. Now we have the problem that we can only do this, when the application is getting detected as an PUA. But this is not the…

Good afternoon, Is there a category to stop file sharing websites similar to there is one for "Gambling" i.e. OneDrive, but then an allow list so we can allow our Business OneDrive? Thanks and kind regards,

Hello, when Intercept-X Web filtering policies will be as those on SFOS and synchronized? DI

I created a policy and a rule to monitor files being transferred to external storage devices. However, it seems the policy only works after a reboot. Is this normal? I haven't seen this with other polices; just the DLP.