We currently installing our server clients to go out a proxy address by command line. We are upgrading our proxies and that means a new name. Is it possible to update the pointer for "--proxyaddress" to point to the new proxies without uninstalling and…

We have issues with Certain Servers which were restored due to some issue, However after restoring the VM from Previous Backup the Sophos has corrupted. When we restore a VM wrt Sophos do we have some pre requisites wrt Sophos? Like disable Tamper etc…

Hi. We have Intercept X Advanced for Server with XDR on Windows 2012 Server Std ( not very fresh stuff ) and Intercept X Advanced for endpoints. My Q is: if I go for a vulnerability scanning on the server with - say tools like Nessus - should I got…

In Server 2022, it looks like Windows Defender is not recognising that Sophos Endpoint is installed. AMRunningMode should be reporting SxS Passive Mode I've checked this on multiple servers and all report the same. Sophos is fully up-to-date, all…

3 days ago one of our few Server 2012 R2 lost heartbeat on the firewall with no visible reason. As it is rarely used, a few users started to complain about inaccessible file shares and other problems. On the server, I first noticed Sophos components…

We have group of servers who are not allowed on our firewall policy to have internet connectivity. My question is what object/FQDN I need to allow so the sophos agent in those server still receive updates and manageable via sophos central.

On a server, a suspected webshell has been found and deleted by Sophos Endpoint. MDR Team checked the case and confirmed: Hash verification via OSINT indicates 'C:\Users\serviceusername\AppData\Local\Temp\SERVICE_XXX\suspectedmalwarefile.jsp' is malicious…

I notice a frustrating Performance issues on Windows Servers with the Taskmanager for some time now. Not sure if known or already fixed. Taskmanager opens normally but when you switch to an other register tab like the Details register, it hangs like…

Hi, we have a similar problem to https://community.sophos.com/intercept-x-endpoint/big-sur-eap/f/discussions/126172/sophos-endpoint-10-0-3-causes-issues-with-electron-based-apps?focus=true One of our customers uses an app called ClickdocPro which…

Hello, We are planning to install Sophos on an updated Exchange server and I'm wanting to know if Sophos has a template to follow to allow the required ports/exceptions for exchange servers? Is there a template offered by Sophos that can be used for…

Hello Sophos Community, Is there a KB or does anyone know the average CPU & RAM usage for intercep x with XDR (server)

Hi What is the best practise for servers lockdown? What about Domain Controllers lockdown? What aboutfile servers? Shay

Morning, We "warn" on for " uncategorized " Were having to go into Website Management and put a re categorize line in for each one. Where does sophos learn from, is there a central site like mcafee's solution of > https://sitelookup.mcafee.com…

I appreciate this has already effectively been asked in the following post. set up gold image to be deployed The case I'm looking to use this on is for a VMware template, so having the server template VM with the goldimage option. When new VMs are…

Hi, I have a quick question about those 2 services, set to automatic but not running. There have been som eposts about them like: 2 Services are stopped - Sophos Clean - Sophos Safestore We notice, they are still there on Server 2012 R2 OS while…

Hello, I have the following hosts that need protection. With the upcoming retirement of Sophos for Virtual Environments ( https://support.sophos.com/support/s/article/KB-000034795?language=en_US ), what Sophos product should I install on these? Or are…

Hello, I have a customer who is saying that they cannot install WIndows updates whilst the server is in Lockdown mode. Is this a common issue & what would be causing this? Any solution would be welcome. Many thanks Lee.

Hi Team, we're planning to use Lockdown on Windows Servers with intercept-X installed. I have some general questions about that feature. Will the lockdown feature affect automatic upgrades from SCCM? What will the effect be if a program/task…

Why does Sophos Central want me to restart the Servers, if there are no differences between the component versions on Servers that are up to date (Events: " Update succeeded ") and those who sophos central want to reboot (Events: "Reboot to complete update;…

Hi. I'm new to Sophos but it has been used in the company I work for for a few years now. I'm looking at the requirements to migrate from Endpoint and Server Protection for virtualized environments managed by Enterprise Console due to EOL to Intercept…

How to start Icap services on Sophos endpoint protection XDR

System install failed when install server . below is log file. 2023-02-20T05:02:57.5698300Z INFO : Running C:\\Users\\ADMINI~1.TSE\\AppData\\Local\\Temp\\2\\SophosSetup-475400664\\Setup.exe 2023-02-20T05:02:57.5698300Z INFO : IsWow64Process2 not available…

I am only able to access a Hyper-V server from the Hyper-V Manager on the physical host. When the connection is established, I can use MSTSC from my local Windows 11 machine to connect to the server and take control of the session. However , if I attempt…

Hello, Computer says: No Sophos Security products installed Sophos Intercept X is missing central says 1. reinstallation of sophos did not helped 2. i have this problem on 10 servers 3. central console lies about…

Checking disk space consumers on our windows servers we see that Sophos folder is huge on them: %programdata%\sophos\endpoint defense\data\event journals\sophosED Some of the subfolders contain tenthousands of files (e.g. Dns or FileBinaryChanges…