Hiya, I am weirdly experiencing major hits to performance on a veriety of high end Windows surface devices following the 24H2 feauture update. I initially felt as if it was windows itself doing this but, upon testing, it seems to disappear when removing…

Hi, we are getting below error i have added Sophos certificate to the trusted certificate of windows but no luck also i have followed sophos KB article again same problem.if i removed endpoint from that machine error is not showing.

Hi Community, I would like to be able to query the Sophos Sub-Estates db with SQL. I read that there is Live Discover service for queries, but I wonder if it can be purchased with a separate license. Otherwise, I would like to know a way to connect…

I have 3 devices with the same name, 2 of them were "deduplicated" according to my sophos central events, they still share the same name but the last activity of one of them was two weeks ago, is it safe to delete the one I know doesn´t have any activity…

Hi, Is there any option to detect internal network port scans from within the network or networks? Like for example using nmap or netcat or others from inside the local network, not from a wan source. I'm posting this in endpoint as well. Thanks…

Hi all, We have the Zero day protection enabled in the firewall, however the same feature is not available in the Sophos end user agent, What will the difference if any laptop with Sophos end point connected to public network under the Sophos firewall…

Dear members I hope this email finds you well. I would like to inquire if Sophos offers any remote wipe functionality for laptops in case of loss or theft. If so, could you provide more details on how this feature works and its requirements? Thank…

The web anti-virus detection logs are written in the IPS logs at .....

Hello, Where can I download Intercept X Advanced？And how to authorize a license to user?

Hi, We have some devices detected as cloned devices by Sophos Central. Old devices last communication time stamp practically same as new device install time. One of them had been cloned twice in last 2 days (3 device copies now). Thanks in advance…

We have a client that has Sophos Endpoint Protection deployed, but doesn't have a Sophos Firewall. They want to enable 'SSL/TLS decryption of HTTPS websites', but will enabling it actually do anything if you don't have a firewall CA and a deployed certificate…

Hi Abhimanyu, "Recently, we deployed Sophos Intercept X Advanced for one of our customers. Now, they are facing system slowdowns. Could you please help me resolve this issue?

Am a bit concerned that the Endpoint trial program I 've installed for a malware scan has uninstalled my antivirus suite (antivirus firewall emails, etc protection). Malware are one thing, antivirus and firewall another. Is my system back on WIndows defender…

We have group of web servers with very large Unpaged Memory used by Sophos. Despite the promise of a fix in the latest agent, all that has happened is the RAM usage gets cleared down on a reboot, it then creeps back up at a rate of 2GB a week. By the…

Hi all, It's possbile to block the port for Endpoint client from Sophos Central ?

When a user has some data on their laptop and attempts to modify or delete it, can Sophos Intercept X Advanced block these actions? Consider an example UserA has some data on their laptop and UserA wants to delete it, can Sophos Intercept X advanced…

Hey guys It is possible to create the following rule in the endpoints: if it's not expressly permitted, it's not allowed. Something similar to the lockdown for servers. Thanks André Soares

Hello, I have the following problem. I have a user with Sophos Endpoint Protection installed that cannot launch any battlenet games. Like Starcraft etc. I have tried to create some exclusion policy for the game but didn't help. If i tamper with…

Hi all, I would like to know about Sophos Intercept X Advanced EP can do for below function. Can it do Web filtering/ Web Block? Can it block some ports , not allow ports? Can it disable USB or external hardisk? Thanks you all.

We found new point under administrative Access on our clients called Device Hardening (Gerätehärtung). Can anyone help me to find out what it is. What did this setting do? Can we adjust it? What is the hardening in detail? many thanks for your…

Hi By default is SSL/TLS decryption of HTTPS websites marked as ON by default? What are the implications or disabling this? Thanks.

I wonder if anyone can help me, I am a user of Sophos Intercept X Essentials Endpoint. As of the middle of February there was an automatic update to one of my products: Core Agent / Sophos Intercept X / Device Encryption which meant that I could no…

We had some reps in to talk about moving from Sophos Intercept X XDR to Defender P2 (or the full E5 security stack). What I really was impressed with was Microsoft Defender for Identity. We're a hybrid org with accounts in AD and synced to Azure.…

Hello! Our Windows 10 laptops not connected Yealink WPP30 and RoomCast. C an someone advise where the problem is?

Hi Team, Some of the users have started to complain about the error after system restarting they are getting (C:\Windows\System32\SophosED\SophosED.dll is either not designed to run on windows 10 22H2 ). I am attaching the screenshot for more info…