On Server 2012 R2 with Exchange and Intercept-X is see the eventlog full with errors caused by Sophos Network Threat Protection Agent.
One error per minute.
Fehler 04.03.2021 12:24:36 Kernel-EventTracing 2 Sitzung
Fehler 04.03.2021 12:23:33 Kernel…