Is there a script i can run on the AD to see all the devices that have Sophos installed on them?

Hi all, I currently have InterceptX Advanced licenses. I wanted to do the trial of the XDR version to understand its effectiveness, but at the end of the trial I necessarily have to go back to the purchased Advanced version because eventually the XDR…

Dears, Our Sophos Intercepts license has expired yesterday and we're on the process of renewing it. Is there any chance we can extend it for a few days before we officially renew it? Thanks!

Hi, Over the last month 9/10 times I have been unable to log on - I am getting the following error, please can you help? 403 - Forbidden The server can be reached, but the server declined to allow the requested access. After the mfa auth, this is…

Hi guys, I'm unable to download and install Intercept X using NFR licenses. what could be the problem

Hi team, Our customer wants to apply for the intercept x with EDR test license. As a sophos partner, where can we apply for the test license? Can we apply for the test license ourselves? Or can we only apply for help through sophos engineers?

Trying to figure out how multiple users can be deleted that inactive for a long time from Sophos Central. In inactive users, there's no option to click multiple users.

No funciona la descarga del adsync en el sophos central

Hi All, can i know is there a way to compile or see how many endpoint license are there in the organization? Thank you.

Hi, Under this API - https://developer.sophos.com/docs/siem-v1/1/routes/alerts/get , there is a value returned which is 'type' and it has such example replies such as 'Event::Endpoint::OutOfDate' - does anyone have a full list of these values exactly…

Is it possible to ship process creation - and other telemetry - from XDR/Central to SIEM? CrowdStrike has an FDR feature to write telemetry to S3, allowing you to consume it within Splunk etc. MS Defender for Endpoint (MDE) has something similar with…

Good morning folks. I've hunted around and searched through the site here, and no where can I find a way to reset the PIN for my MFA. I'm still fairly new to the software, so I am assuming that I'm missing it and not that it's just not there. Is there…

When an endpoint in Sophos Central shows an out-of-date device that needs updated... Is it better to force an update through Sophos Central Admin Dashboard or wait till it checks for updates automatically on the scheduled day/time? Any suggestions or…

We used to use SEC and this all worked fine. We mainly used to use Email notifications to monitor when users were plugging in USB devices, and it also used to send us an email detailing which files had been copied. When we moved to Sophos central, it…

Hello, we have the porblem, that external Users out of our O365 Tedant (e.g. MS Teams Guest Users) automaticly replicated by the Sophos AD Sync, so we habe many unwanrted accounts in Sophos. How must i set the Filter options to exclude AAD Guest…

Hi, How can I reverse a configured Base Policy to default ? At the end, the Base Policy should not pretend the sub-estate. I can only "reset" the Base Policy, but it is even activated in the sub-estate. Best regards, Thomas

Hi, After activating the Sub-estates & Global Template in Sophos Central Enterprise, I apply my default Sub-estate to the Global template. The global exclusions of the default configuration is also integrated. How can I delete the older global…

Hello, I was wondering about what the process is like for when a license expires. I currently have 16 machines using Intercept X for Servers, and they're due for expiry soon. Please see the screenshot below: Sorry for being pedantic, but I am…

Hey Guys, I am facing a problem with deploy the agent from Datto rmm. our client has arond 80 workstations and 17 of them is succed and they have sophos agent maar the rest not. Here is the log file with the error from rmm. Thanks for anyone can help…