Hello everybody. is there any query that checks all users with administrative privileges on the network? Thanks

On Sophos Central is there a way to check devices for the status of OS updates to ensure they are up to date? Windows MacOS Linux

Is there a way to check what applications are installed on a device and if these are up to date via Sophos Central?

Does anyone have DLP custom filter example for Source Code exfiltration protection ?

Greetings, I am running in to an issue where there are a few dozen remote endpoints which are active but not present on the portal. I need to get the clients checking back in, but everything I have found which should readily work either requires physical…

i have intercept-X with XDR installed i want to see that if any particular IOC is present or not??? if present then how can i delete it?? please guide.

Hi, thanks for helping: I am currently testing the DLP features of Sophos Endpoint but can't get any rule to work. I have even established a file based rule which I would expect to trigger in any case: Allow transfer if user confirms File type…

Hi, We wanted to issue company-owned USB drives and then use Sophos to block all other USB drives. This seemed straightforward - buy USB drives, plug them in with peripheral control in monitor mode to get the InstanceIDs of each USB stick, and then…

Hi Everyone, I saw some posts but I didn't see any conclusive solution, is it possible to block youtube through sophos central? I managed to block pages like twitter, instagram, tiktok, but youtube does not block, any way to fix this? Thanks!…

Team, does anyone know how I can uninstall a sophos agent, which has been removed from the console. I have the password against manipulation but the agent does not have the button to enter the administrator. I tried with sophoszap and I couldn't.

Good day I have a client that was offline for a while, last update in August 2022 - Now it's not showing in Sophos Cloud Devices page, and I cannot uninstall or re-install because tamper protection is on. Any idea on what I can try to resolve without…

Need to block aadhar card in dlp policy sophos

Hi Team, How to change Endpoint DLP Severity. Is advanced setup i.e Min and Max Count depends Severity? Because, when i am defanging an action based upon count, its not working as expected. For Eg: 1. CC: Min - 1 & Max - 4 Action: Allow 2. CC…

Hi guys, SOPHOS Support cannot help me in that case, they always sind me a manual with not really good content inside for this topic. Maybe you can answer my question! We are using DLP by Sophos and want to check if a spec. content is inside of a file…

Hello I have one user who is unable to enter a bitlocker password, in that there appears to be a password already present, but the user is unable to delete this to enter the bitlocker password. They have to call the helpdesk each morning to obtain a…

Dear, I'd like to set all USB port is read only for external drive for data protection. *File read to PC from external drive. <= support. Read only. *File copy from PC to external drive. <= Block. Would you please advise where & how can I set…

We took over for another MSP and prior to cutting ties the old MSP left us a spreadsheet with the Sophos tamper protection passwords, but our issue is that they didn’t work on all the machines. I have five that still need the endpoint removed from. …

How to list all installed applications in the windows end devices/Clients using sophos Threat Analysis Center.

Hello, We are having issues on our devices with the AusweisApp2 in conjunction with Sophos Endpoint Protection. The AusweisApp2 is a German application for authenticating oneself on the Internet with one's identity card on government websites. When…

The goal is to block USB flash drives but when the policy is set up, printers, even network printers and fingerprint scanners are blocked.

Hello everyone one of our costumers have Windows 10 Professional with Intercept X in use. On all 30 computers, the blocking of USB mass storage devices worked until a few weeks ago . We have also not changed or reconfigured anything in the portal. However…

We are in the process of testing out the SSL/TLS Decryption in our Endpoint policies. I have recently come across an issue with a site our users access that requires a certificate to authenticate properly. I have exempted this site's URL in the global…

hello, we have a serious problem, all the computers that were managed with the sophos central were deleted, so they didn't update and I have 100 computers that are without management. the problem is that I am missing the tamper password of those computers…

Hello all, I want to ask if anyone has a solution or work around. I have talked to Sophos support and their answer is "not capable" and "cannot cover all the leaks currently". Currently, DLP condition for destination is not really destination. It…

Hello, we would like to have a query to search specific events on Windows from EventID variable. Thanks in advance