Hello I have one user who is unable to enter a bitlocker password, in that there appears to be a password already present, but the user is unable to delete this to enter the bitlocker password. They have to call the helpdesk each morning to obtain a…

Dear, I'd like to set all USB port is read only for external drive for data protection. *File read to PC from external drive. <= support. Read only. *File copy from PC to external drive. <= Block. Would you please advise where & how can I set…

We took over for another MSP and prior to cutting ties the old MSP left us a spreadsheet with the Sophos tamper protection passwords, but our issue is that they didn’t work on all the machines. I have five that still need the endpoint removed from. …

How to list all installed applications in the windows end devices/Clients using sophos Threat Analysis Center.

Hello, We are having issues on our devices with the AusweisApp2 in conjunction with Sophos Endpoint Protection. The AusweisApp2 is a German application for authenticating oneself on the Internet with one's identity card on government websites. When…

The goal is to block USB flash drives but when the policy is set up, printers, even network printers and fingerprint scanners are blocked.

Hello everyone one of our costumers have Windows 10 Professional with Intercept X in use. On all 30 computers, the blocking of USB mass storage devices worked until a few weeks ago . We have also not changed or reconfigured anything in the portal. However…

We are in the process of testing out the SSL/TLS Decryption in our Endpoint policies. I have recently come across an issue with a site our users access that requires a certificate to authenticate properly. I have exempted this site's URL in the global…

hello, we have a serious problem, all the computers that were managed with the sophos central were deleted, so they didn't update and I have 100 computers that are without management. the problem is that I am missing the tamper password of those computers…

Buen día. Espero me puedan ayudar con esta duda. ¿Hay manera de que desde Sophos Central pueda obtener información de un endpoint como marca, modelo, número de serie, sistema y algunas características del hardware del endpoint? En caso de que no…

On a Windows 11 Home computer (fresh clean OS install), the web filter does not work in Chrome. I'm testing it by going to http://sophostest.com/adult/index.html in Chrome and the page does not get blocked. It DOES get blocked in Edge, just not Chrome…

Hello, multiple customers got in touch with us because they are not able to configure the Windows Defender Firewall anymore. Windows shows that Intercept X Advanced is used as firewall instead. The configuration was not changed, the policy in Central…

Hello all, I want to ask if anyone has a solution or work around. I have talked to Sophos support and their answer is "not capable" and "cannot cover all the leaks currently". Currently, DLP condition for destination is not really destination. It…

Hello, we would like to have a query to search specific events on Windows from EventID variable. Thanks in advance

We are using Intercept X on all of our workstations and I would like to setup a policy where users cannot upload files to any sites. (webmail, online storage, etc.) But I want them to be able to still download from those same sources. Is this possible…

Please see a comment we got from sophos support: Since our latest update to Sophos Central (2.20.13 - April Release onwards), Sophos Web Control and Web Filtering has received a large overhaul. This is not something we can revert however we've found some…

Hi, I was testing a website exclusion in Intercept-X and had a hard time to finnaly get it working. So I wanted to browse to the Sophos Testsite. As expected this was blocked. regardless of http or https used. So I went to Central Global settings…

Will i still be able to log into the admin console after my licence expires? I just want to make sure i will be able to remove tamper protection from any laptop we havent been able to move over to the new solution before the expire date

Hello, i need to know all website that user access from their devices, can XDR do this? If XDR can do it, please guide me to query. thanks

good morning I wanted to know if in the DLP it is possible to add a rule to block folders on a network share? Danilo

support.sophos.com/.../KB-000043946

Hello, I want to have a query to check for possible PII. There is the query to check for metadata such a password.docx or password.txt. Below is what I have so far and this works as long as you have the exact file path and pattern you are looking…

Hi everyone, I was wondering if there is any way of scheduling a query and sending via email the exported result, so that the process doesn't need to be done manually. For example, imagine I schedule a query to be done weekly, after every time it is…

Hi, Is there any query that find if the files on the device based on hash that we define? Thank you and kind regards.

Dear all, We have following issues with a couple of users - They not able to open a link in Outlook, it doesnt matter if its link to a local or a network file.Most after hours the link opens, somtimes they not able to upload files in the webbrowser…