Good morning (NZ Time) We are an IT support business We use connectwis's screenconnect product to remotely support all of our clients, and have done for 6 years. From Yesterday afternoon (NZ Time) our Sophos Central alerts are going off with the below…

From this morning's New Innovations email: "Adaptive Active Adversary Protection temporarily puts the impacted device into a more aggressive security mode that disrupts and delays the attacker by automatically blocking a wide range of activities that…

Hi, We're having strange issue: The "ransomware detection" setting is interfering with a local .NET process running on our machines. When the detection is switched on the processes run much slower, this is caused by long pauses in Gen0 and Gen1…

We have an issue where if our users want to use a Hotel, Conference Centre, or Airport Lounge’s Wi-Fi they can’t because the Wi-Fi network’s internal logon splash screen is blocked as ‘Uncategorised’ by SOPHOS Central Web Protection and we don’t allow…

We are planning to deploy Sophos CIXA in our customer environment. before that we need to remove Customer's existing EPS - Palo alto cortex. Sophos CRT support to remove competitor (Palo alto cortex)?

Hi, every week we get a Sophos Managed Threat Response report about clients and servers. Is it possible to split this report in clients and servers? Regards Dennis

I have a user who wants a dual boot workstation with Windows 10 and Ubuntu. I want to be able to use native encryption for both devices and have them report to our Sophos Central portal. Is this configuration possible with Sophos Central?

We have performance issue with Citrix Intercept installed on VDI Citrix desktops. When the users open files (office, pdf, etc...) I see Sophos file scanner that use 60 and more cpu every time (I know that Sophos have to do the scan of the file...).…

Hello, For some reason Sophos categorize one of our very serious domain as "provocative attire" so I put an exception to this domain as I already made for some other blocked sites we met. But this time it has been six hours and still nothing when for…

I want to allow an application which are detected with Sophos central, but in the event details tab is not showing allow applications option. even though when I allow the detected path from global settings allow applications then the application is not…

Hi, Hopefully a simple question. Today I am seeing an alert for a malware detection for a customer, but the alert is just saying "Requires Attention", rather than something like manual cleanup required. Does this just mean I need to have a look at what…

Hi fellas, is it possible to use the data from a device restriction policy set up in a SEC during migration to Sophos Central? (Export - Import....) GreeetNx Harry

Hello everyone. I am about to deploy more than 1000 endpoints in my network through GPO, however in the tests that I perform the installation takes too long. The option "Choose components" does not give many details, that is not helping me. Is there a…

We have an internal approved application that we've been running for about a year. Sometime last month Sophos Central started blocking it as "CryptoGuard". We have it added in Allowed Applications as well as Global Exclusions. Per this post 3 years ago…

Made a copy of Threat Protection added 2 exclusions C:\ProgramData\SolidCast\ C:\ ProgramData\SolidCast\FixedVolumeFillUtility.exe Yet every now and then we get this: Generic ML PUA detected at C:\ProgramData\SolidCast\FixedVolumeFillUtility…

We have a Base Policy for Web Control, that every user picks up. In the Website Management, we have websites like DropBox added and tagged to block in the policy. I have tried numerous links and websites including DropBox, and it blocks as expected…

We are in the process of removing Sophos (we only used it for device encryption) from about 1000 computers. I ran into two devices so far that had apparently been deleted from Sophos Central by mistake https://tutuappx.com/ more than 90 days ago. Now…

Does anyone have any experience in remotely fixing computers that are reporting to Sophos Central with an alert of "Failed to Protect Computer" or showing a bad status with "Services Missing or not Running"? When I say remotely, these are computers spread…

Hi All, A user has asked for a printer/scanner to be unblocked via device control. At first the model ID of the device was shown in the events of both Endpoint and Central and I was able to add an exemption for the device. However, this only unblocked…

Community, This is more of a FYI then a question. But would like to request FQDN be added to "REMOTE ADDRESS" in windows isolation, and documentation updated for windows isolation exceptions Windows Isolation Exceptions. Requirements . Direction and…

Dears , I make a list of computer that showing in Sophos central website and compare it with computer in ad manager and I found a list of computers that not showing in Sophos central. when I checked those computer I saw that Sophos endpoint are…

Hello, I'd like to implement the Peripheral Control policy on Sophos Central and I need to know what is update time cycle to the endpoints (intercept X). I need to know after I add an exception to a USB device what's the maximum time to be applied on…

Hi There Everyone, I'm stuck at this Sophos Endpoint Installation on Windows 10 Pro, could anyone assist on this issue attached with installation log and error picture SophosCloudInstaller_20221122_055507(amy-sales).log

hi team you know 2 months ago i got this error on a server. " Failed to install ESH64: general error." I uninstalled the agent, cleared the logs, and reinstalled it, but the error persists. all services are green and running... security patches and…

I want to block the download from google driver but the user is still connected to google to see the data. I just want to make sure to download files from google drive web