Hi, we are getting below error i have added Sophos certificate to the trusted certificate of windows but no luck also i have followed sophos KB article again same problem.if i removed endpoint from that machine error is not showing.

Hi Community, I would like to be able to query the Sophos Sub-Estates db with SQL. I read that there is Live Discover service for queries, but I wonder if it can be purchased with a separate license. Otherwise, I would like to know a way to connect…

I have 3 devices with the same name, 2 of them were "deduplicated" according to my sophos central events, they still share the same name but the last activity of one of them was two weeks ago, is it safe to delete the one I know doesn´t have any activity…

Hi, Is there any option to detect internal network port scans from within the network or networks? Like for example using nmap or netcat or others from inside the local network, not from a wan source. I'm posting this in endpoint as well. Thanks…

Hi all, We have the Zero day protection enabled in the firewall, however the same feature is not available in the Sophos end user agent, What will the difference if any laptop with Sophos end point connected to public network under the Sophos firewall…

Dear members I hope this email finds you well. I would like to inquire if Sophos offers any remote wipe functionality for laptops in case of loss or theft. If so, could you provide more details on how this feature works and its requirements? Thank…

The web anti-virus detection logs are written in the IPS logs at .....

Hi, We have some devices detected as cloned devices by Sophos Central. Old devices last communication time stamp practically same as new device install time. One of them had been cloned twice in last 2 days (3 device copies now). Thanks in advance…

We have a client that has Sophos Endpoint Protection deployed, but doesn't have a Sophos Firewall. They want to enable 'SSL/TLS decryption of HTTPS websites', but will enabling it actually do anything if you don't have a firewall CA and a deployed certificate…

Can I simply run the Golden Image script https://support.sophos.com/support/s/article/KB-000035040?language=en_US#Script when I want to clone a server VM with Intercept-X installed? Some tests need to be done on the cloned VM before it will be deleted…

Am a bit concerned that the Endpoint trial program I 've installed for a malware scan has uninstalled my antivirus suite (antivirus firewall emails, etc protection). Malware are one thing, antivirus and firewall another. Is my system back on WIndows defender…

Hi all, It's possbile to block the port for Endpoint client from Sophos Central ?

When a user has some data on their laptop and attempts to modify or delete it, can Sophos Intercept X Advanced block these actions? Consider an example UserA has some data on their laptop and UserA wants to delete it, can Sophos Intercept X advanced…

Hi all, I would like to know about Sophos Intercept X Advanced EP can do for below function. Can it do Web filtering/ Web Block? Can it block some ports , not allow ports? Can it disable USB or external hardisk? Thanks you all.

We found new point under administrative Access on our clients called Device Hardening (Gerätehärtung). Can anyone help me to find out what it is. What did this setting do? Can we adjust it? What is the hardening in detail? many thanks for your…

Hi By default is SSL/TLS decryption of HTTPS websites marked as ON by default? What are the implications or disabling this? Thanks.

We had some reps in to talk about moving from Sophos Intercept X XDR to Defender P2 (or the full E5 security stack). What I really was impressed with was Microsoft Defender for Identity. We're a hybrid org with accounts in AD and synced to Azure.…

We are facing a situation where we need to use Intercept X with Windows 7. The challenge is that the client cannot upgrade the system due to incompatibility with certain medical instruments. We are considering using Intercept X as an antivirus solution…

I am reaching out for guidance on a critical issue one of our clients is currently facing. They have fallen victim to a ransomware attack, specifically impacted by the 'Hhuy virus' from the STOP/DJVU ransomware family, identifiable by the '.HHUY' extension…

problems installing sophos endpoint, Error: No reachable update service locations , The log generates the following: 2023-12-19T15:28:54.2670382Z INFO : Trying update service url sus.sophosupd.com/.../d409441b-33e9-47f3-b22a-0cf49378a0a8 with proxy: …

Hi, we are using Sophos End point for laptop and desktop now we need server protection same endpoint we have to use for server protection or any other application for server.

Hi there, What does what is found on the Threat Graphs mean? what should I do as a solution?

When installing core agent 2023.1.3.5, some devices show 2023.1.3.5 BETA and some show 2023.1.3.5 versions. Why is there two versions? When did the version change? Updating does not change it to 2023.1.3.5 BETA version to 2023.1.3.5.

We currently installing our server clients to go out a proxy address by command line. We are upgrading our proxies and that means a new name. Is it possible to update the pointer for "--proxyaddress" to point to the new proxies without uninstalling and…

Due to a requirement of devices not on Asset inventory need to broadcast a message to ENDPOINT users who are using the systems. Is there a way to trigger such a custom message?