Hi, We've recently moved to a hybrid setup for our Windows devices (local active and Intune). Many devices have successfully fully setup but most have not. They are registered with Intune and show compliance, however we have found that those not working…

Hi i got this error while trying to install sophos agent.

Hello, I have a Macbook Pro (2019 Intel) with macOS 14.6.1 (Build23G93) with Sophos Endpoint 2024.2.0.35 in Sophos Central. On this endpoint, real-time protection is deactivated from time to time, without any influences. So far, a scan or an update…

I requested a trial to Sophos Central to try it out on all our macbooks before deciding on a purchase, now I am logged in to central but do not see the macos installer, only the windows ones. Since we only have literally 1 Windows machine, this is of…

Hallo, ich habe ein Problem mit der Installation der kundenspezifischen .exe-Datei, die ich aus dem Sophos Central des Kunden herunterlade. Während des Setups wird das Gerät erfolgreich in Sophos Central registriert und der Download verläuft reibungslos…

Hello, I would like to suggest an improvement to the Peripheral Control Policy by adding a note/comment field where we can enter a text justifying the exception. I have “old” exceptions for USB sticks/disks that I can't remember what/who they were…

Hi, Is there any osquery to get all the domain-joined machines where the "Domain Users" group is added to the "Remote Desktop Users" local group?

Hi, We have some devices detected as cloned devices by Sophos Central. Old devices last communication time stamp practically same as new device install time. One of them had been cloned twice in last 2 days (3 device copies now). Thanks in advance…

I have noticed my own computer (a quite fast machine, a HP Elitebook with i7 Gen13, 16GB RAM, Gen4 NVME SSD) feeling terribly slow when turning it on in the morning after being off for more than 10h. Program starts and reaction time is very sluggy for…

We run a small licensing application on a server, and the same client runs on student PCs in our media lab. The application named "iLok" started failing a few weeks ago, and after some investigation it is Sophos blocking it. We found by trial and error…

Hi, I'm trying to automate Sophos Central installation via NinjaRMM. For Windows, I'm able to use Installed Software as a condition as described in the support guide: Create a Deployment Policy However, I'm not sure what condition is best to use…

Hello, I am currently using Sophos Endpoint Protection Intercept X Advanced in the company network. Is it possible with Endpoint Protection to block USB interfaces for storage media such as USB sticks or external hard drives? So that only approved USB…

If you use the sophos central ednpoint agent on a windows 10 / 11 machine debegging in borland / embarcadero delphi is extremely slow. This workarround works: sophos hitman pro alert und borland delphi debugging extrem lamngsam But: This MR expieres…

I have a problem at installation on a PC, we have installed the endpoint in other PCs in the same network without problems. The installation starts and seems to work correctly, it reaches the MR/UC server and completes stage 1, then it starts working…

Since 1 or 2 weeks ago, we started receiving reports from users that they were experiencing performance issues at launching / closing some applications on Windows servers. We haven't changed any policies on the servers. If we disable real time scanning…

We have a client that has Sophos Endpoint Protection deployed, but doesn't have a Sophos Firewall. They want to enable 'SSL/TLS decryption of HTTPS websites', but will enabling it actually do anything if you don't have a firewall CA and a deployed certificate…

Hi, Is there a way to see what update server endpoints are talking to? There used to be a log of the communication that clients had with the update servers or update cache servers, but I can not find it anymore. If anyone can point me in the right…

Can I simply run the Golden Image script https://support.sophos.com/support/s/article/KB-000035040?language=en_US#Script when I want to clone a server VM with Intercept-X installed? Some tests need to be done on the cloned VM before it will be deleted…

Hi Everyone, Do we have any news or information on whether this issue will be resolved or not? We have a BIG client of ours that is considering ditching Sophos Endpoint because of this problem... Sophos Central Admin: PrivGuard feature blocks application…

Hello I can't find a way to easily monitor a folder on a mounted smb network share. For reasons not in the scope of this post it's not an option to install sophos on the actual file server. The host that would monitor the specific folder on this…

In relation to this, which is a closed thread with no real solution: Extreme High CPU Usage with sophps protection with Linux I'm a bit confused here. We have this issue reoccurring on a Linux server at this point, entirely randomly. osqueryd eats up…

Hello, I have a Windows 11 Pro Client that has a Sophos Endpoint Protection Client installed. But in Sophos Central the client is not listed any more. When I start an update on the client manually, there comes an error. I can´t find any way to…

Hi, I want to test ransome ware attached in client which installed Sophos Endpoint. How can I check it from Sophos Central for this attach notification and How can I put this Ransome ware file to this client for testing.

I have a hash like: 6ea2c9276c122222222222f9ae2 i want to search on the clients for this hash. is there a posibility to search with Sophos EP?

All Sophos agent users get a notification ( Access to computer "x" denied because it may be unsafe). This notification gets recently all user, thing is that all users any users get other users notifications.