Hello, For some reason Sophos categorize one of our very serious domain as "provocative attire" so I put an exception to this domain as I already made for some other blocked sites we met. But this time it has been six hours and still nothing when for…

I want to allow an application which are detected with Sophos central, but in the event details tab is not showing allow applications option. even though when I allow the detected path from global settings allow applications then the application is not…

Hi, Hopefully a simple question. Today I am seeing an alert for a malware detection for a customer, but the alert is just saying "Requires Attention", rather than something like manual cleanup required. Does this just mean I need to have a look at what…

Hello, Had some questions about Sophos central's capabilities. Can Sophos central manage vulnerabilities and out of date software? How would the licensing model work for shared systems like Terminal servers that have many users logging in?

Hi fellas, is it possible to use the data from a device restriction policy set up in a SEC during migration to Sophos Central? (Export - Import....) GreeetNx Harry

Greetings, I am trying to find out how to update the Message Relay application for our 2019 Windows server. The version of httpd.exe is apache 2.5.3 which appears on our Nessus Vulnerability reports. Sophos has released a kb documenting why their…

Hello everyone. I am about to deploy more than 1000 endpoints in my network through GPO, however in the tests that I perform the installation takes too long. The option "Choose components" does not give many details, that is not helping me. Is there a…

Hello, I would like to know if the avscanner scanning utility (from the command line) loads the virus definitions with each scan or if they are resident in memory (as in the case of the former SAVDI). I ask this because the scanning speed is high compared…

We have an internal approved application that we've been running for about a year. Sometime last month Sophos Central started blocking it as "CryptoGuard". We have it added in Allowed Applications as well as Global Exclusions. Per this post 3 years ago…

Made a copy of Threat Protection added 2 exclusions C:\ProgramData\SolidCast\ C:\ ProgramData\SolidCast\FixedVolumeFillUtility.exe Yet every now and then we get this: Generic ML PUA detected at C:\ProgramData\SolidCast\FixedVolumeFillUtility…

We have a Base Policy for Web Control, that every user picks up. In the Website Management, we have websites like DropBox added and tagged to block in the policy. I have tried numerous links and websites including DropBox, and it blocks as expected…

Hi all, Was hoping to potentially get some tips for setting up an air gap connection with up to date Sophos anti-virus protection, In the building currently we have a setup where we got a Sophos Central Console connecting to machines with Sophos…

We are in the process of removing Sophos (we only used it for device encryption) from about 1000 computers. I ran into two devices so far that had apparently been deleted from Sophos Central by mistake https://tutuappx.com/ more than 90 days ago. Now…

Does anyone have any experience in remotely fixing computers that are reporting to Sophos Central with an alert of "Failed to Protect Computer" or showing a bad status with "Services Missing or not Running"? When I say remotely, these are computers spread…

Hi All, A user has asked for a printer/scanner to be unblocked via device control. At first the model ID of the device was shown in the events of both Endpoint and Central and I was able to add an exemption for the device. However, this only unblocked…

Community, This is more of a FYI then a question. But would like to request FQDN be added to "REMOTE ADDRESS" in windows isolation, and documentation updated for windows isolation exceptions Windows Isolation Exceptions. Requirements . Direction and…

Hi Support, We have been aware of the Captive portal issue for a couple months now, and we were hoping that MacOS Ventura would have fixed this issue. However, it seems like this is still a problem with multiple users we have running MacOS 13.0.1 (the…

Dears , I make a list of computer that showing in Sophos central website and compare it with computer in ad manager and I found a list of computers that not showing in Sophos central. when I checked those computer I saw that Sophos endpoint are…

Hello, I'd like to implement the Peripheral Control policy on Sophos Central and I need to know what is update time cycle to the endpoints (intercept X). I need to know after I add an exception to a USB device what's the maximum time to be applied on…

Greetings, We're running Sophos Protection for Linux Server (SPL) with MTR and InterceptX. We're running it across many Ubuntu 20.04 LTS servers (OS and apps are fully updated). We're also running Veeam Backup & Replication (VBR) with Veeam Agent for…

Hey Sophos Team, can you please implement a sort function in all tables? Example here: Server protection > Servers I'd like to sort the table by lockdown status. Probably someone forgot that. We are aware of this filter for lockdown:

hi team you know 2 months ago i got this error on a server. " Failed to install ESH64: general error." I uninstalled the agent, cleared the logs, and reinstalled it, but the error persists. all services are green and running... security patches and…

Hi There Everyone, I'm stuck at this Sophos Endpoint Installation on Windows 10 Pro, could anyone assist on this issue attached with installation log and error picture SophosCloudInstaller_20221122_055507(amy-sales).log

I want to block the download from google driver but the user is still connected to google to see the data. I just want to make sure to download files from google drive web

Does anyone know if you can uninstall and then install Sophos Agent by console?