• Intercept X endpoint on server incorrectly using real time scanning on Class B 172 internal IP addresses

    Tim Nightingale
    Tim Nightingale
    I have a customer environment where the server has multiple NICs and IP addresses. The client stores very large video files on the server. Each recording studio has a dedicated 10GBps LAN link to the server and each is on a 172.19.x.x/24 Class B internal…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Alert - WIN-INI-PRC-VEEAM-BACKUP-SUSP-CHILD-PROCESS-1

    Gleison Lichtenfels
    Gleison Lichtenfels
    Hello everyone, Is anyone else getting "High-Risk" detections " WIN-INI-PRC-VEEAM-BACKUP-SUSP-CHILD-PROCESS-1 " from Veeam Backup and Replication? Parent Command Line: "C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.Service…
    • Answered
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Veeam backups failing. Bypass RTS fixes

    Anthony Flynn
    Anthony Flynn
    Veeam B&R version 12.2.0.334 keeps failing unless I disable/override Real Time Scanning > Files. We have put in place all relevant exception rules that I can find on the Sophos support portal but I find I'm still having issues caused by the RTS. …
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • sophos endpoint defense software exchange 2016

    Sebastian Mair
    Sebastian Mair
    hi, since friday we have high cpu with the sophos endpoint defense software process. windows server 2016 sophos central server core version: 2024.2.2.1 after disabling all the features the cpu is back to normal.. any ideas?
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Experiencing performance slowness by real time scan

    Masato
    Masato
    Since 1 or 2 weeks ago, we started receiving reports from users that they were experiencing performance issues at launching / closing some applications on Windows servers. We haven't changed any policies on the servers. If we disable real time scanning…
    • 4 months ago
    • Sophos Endpoint
    • Discussions
  • cloned VM for testing purpose - fix Sophos Central GUID with golden image script?

    LHerzog
    LHerzog
    Can I simply run the Golden Image script https://support.sophos.com/support/s/article/KB-000035040?language=en_US#Script when I want to clone a server VM with Intercept-X installed? Some tests need to be done on the cloned VM before it will be deleted…
    • 4 months ago
    • Sophos Endpoint
    • Discussions
  • sophos relay server

    Nyein Chan Zaw
    Nyein Chan Zaw
    Hi all, I plan to install sophos relay server and other client will connect to this server to get update and policy. For this relay server as sophos document it should be window server and anyone have this installations guide for this relay server …
    • Answered
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • SATC and run-as sessions on the Terminal Server never logged out

    LHerzog
    LHerzog
    As we have opened a new case on it 07354794, I wonder if this is a known result, because I cannot find any information about it. Scenario: Fully setup SATC Client / Firewall for a Windows 2022 terminal server . User logins on the firewall are working…
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • mcs-push-server redirection - failing LiveQueryScheduled json upload - MCS client service running on high CPU load

    LHerzog
    LHerzog
    On some Servers behind Sophos UTM firewall, which is not capable of wildcard DNS hosts, we noticed increasing CPU load over the last days. Up to 100% today and the server became sluggish. The CPU load was rising since March 28th - where we rebooted…
    • Answered
    • 8 months ago
    • Sophos Endpoint
    • Discussions
  • planned rollout of Server Endpoint v2023 2 ?

    LHerzog
    LHerzog
    When will the new Windows Server Endpoint version 2023.2 be rolled out? It has been announced some time ago (The release of Core Agent 2023.2 is currently on hold due to unforeseeable issue & we're releasing Core Agent 2023.2.1 on Feb 01 which would…
    • 9 months ago
    • Sophos Endpoint
    • Discussions
  • WIN-PROT-HMPA-MALWARE-CRYPTOGUARD

    Silvio Bittner
    Silvio Bittner
    Hello Community, This message appears on a file server, with the associated IP address that is said to have carried out the attack. CryptoGuard detected a ransomware attack from 192.168.X.X (client ip) The client shows the same thing, but nowhere is there…
    • 9 months ago
    • Sophos Endpoint
    • Discussions
  • How to trigger alert - Intercept X Advanced for Server if usage value reaches the actual limit

    Johnprabu Salethraj
    Johnprabu Salethraj
    Hi team, we are using Intercept X Advanced for Server. I am working for Genesys telecom labs. I would like to know the steps how to configure an alert for the license limit. We have a situation that [regarding licensing] usage value exceeds the limit…
    • 8 months ago
    • Sophos Endpoint
    • Discussions
  • Can not install sophos cloud client on Windows server

    Ishaq E
    Ishaq E
    2024-02-19T14:30:43.7770501Z INFO : Running C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\2\\SophosSetup-1839998792\\Setup.exe 2024-02-19T14:30:43.7770501Z INFO : IsWow64Process2 not available on older platforms 2024-02-19T14:30:43.7770501Z INFO : Stage…
    • 9 months ago
    • Sophos Endpoint
    • Discussions
  • Central Migration tool say Unknown login error . See log for more information

    Mester József
    Mester József
    Hello I have an Endpoint Central Server. I started migration 4 month ago. Today I can't log into the Migration Tool to see how many computers are in the old state. I got this error. Central Migration tool say Unknown login error . See log for more…
    • 9 months ago
    • Sophos Endpoint
    • Discussions
  • What version of Sophos contains sophosinterceptxcli.exe? I have to scan a single file.

    Michael Leonetti
    Michael Leonetti
    Hello! New to this forum. We have the Sophos Agent here on all of our servers. I need to use the agent to scan a single file on the CLI and output whether or not it is infected. I need to do this in C# that's why I was looking for the CLI app. But I…
    • Answered
    • 9 months ago
    • Sophos Endpoint
    • Discussions
  • Update Cache failing since retirement of SDDS2

    stoomart
    stoomart
    Hi all, Our Update Cache running on Windows Server 2019 last updated successfully at 2024-01-27T22:43:38.408Z and has been failing since. It was running LTS 2023.0.0.2 but the issue continued after upgrading to FTS 2023.1.2.10. I installed a new…
    • Answered
    • 9 months ago
    • Sophos Endpoint
    • Discussions
  • Issue with Sophos Endpoint Intercept X Advanced for Server on Windows Server 2022 HyperV Guests

    Russell Admin
    Russell Admin
    Issue with Sophos Endpoint Intercept X Advanced for Server on Windows Server 2022 HyperV Guests Hypervisor is also Server 2022 host running Sophos Endpoint Intercept X with all the recommended HyperV exclusions in place. The guests VMs get ridiculously…
    • 10 months ago
    • Sophos Endpoint
    • Discussions
  • SOPHOS and Hanwha camera servers with Windows OS.

    Sid Wallace
    Sid Wallace
    I am the admin for quite a number of Hanwha camera servers. Several in particular are in a school system. Once our servers were installed, unknown to us, they deployed SOPHOS on the servers. Now we are seeing numerous crashes, lockups, packet losses and…
    • 10 months ago
    • Sophos Endpoint
    • Discussions
  • please improve Lockdown uninstall approach

    LHerzog
    LHerzog
    We have decided to uninstall SLD from all servers where it was installed but unlocked. What a strange behaviour, that it installs itself back some time after you remove and reinstall the Sophos endpoint software completely. Then you find, you need…
    • Answered
    • 10 months ago
    • Sophos Endpoint
    • Discussions
  • SMB-RR-Server Protection InterceptX

    satyabrata bastia
    satyabrata bastia
    Hi, we are getting above quote from vendor ----SMB-RR-Server Protection InterceptX we are using on-premises server. how to install in physicals and virtual machine if both are present in same machine and its required same software or different.…
    • Answered
    • 10 months ago
    • Sophos Endpoint
    • Discussions
  • Windows Updates and Server Lockdown

    Crackers
    Crackers
    Hello, Is anyone successfully installing Windows Updates whilst lockdown is enabled? My understanding is that server updates need to be installed before the server is locked down: https://support.sophos.com/support/s/article/KB-000035355?language…
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • server protection

    satyabrata bastia
    satyabrata bastia
    Hi, we are using Sophos End point for laptop and desktop now we need server protection same endpoint we have to use for server protection or any other application for server.
    • Answered
    • over 1 year ago
    • Sophos Endpoint
    • Discussions
  • data exfiltration from server

    Ahmad
    Ahmad
    hi, i have installed CIXA for server on few servers. on 3rd of AUG 23 few of my server in LAN upon which cixa for servers were not installed, got hit by ransomware , file extension becom gasprom, i also have XG 310 at gateway level and turned on ATP…
    • over 1 year ago
    • Sophos Endpoint
    • Discussions
  • Sophos setup error to install on server 2019

    Negasa Ashu
    Negasa Ashu
    Hello, Server protection is unable to install on the server 2019 "Failed to download the installer" server Log: 2021-10-10T16:10:32.6661271Z INFO : Running C:\\Users\\ZELALE~1\\AppData\\Local\\Temp\\SophosSetup-395623309\\Setup.exe 2021-10-10T16…
    • over 1 year ago
    • Sophos Endpoint
    • Discussions
  • Sharing violations on SMB share, Office, tmp files when saving (file in use by someone else)

    LHerzog
    LHerzog
    Users are working with Microsoft office files on SMB shares on windows servers. When working inhouse all is fine. When they work remotely via Sophos SSL VPN Client, some users cannot save documents or excel sheets on the network shares because office…
    • over 1 year ago
    • Sophos Endpoint
    • Discussions
  • View related content throughout Sophos Endpoint
  • More
  • Cancel
>