Hiya, I am weirdly experiencing major hits to performance on a veriety of high end Windows surface devices following the 24H2 feauture update. I initially felt as if it was windows itself doing this but, upon testing, it seems to disappear when removing…

Hi, we are getting below error i have added Sophos certificate to the trusted certificate of windows but no luck also i have followed sophos KB article again same problem.if i removed endpoint from that machine error is not showing.

Hi Community, I would like to be able to query the Sophos Sub-Estates db with SQL. I read that there is Live Discover service for queries, but I wonder if it can be purchased with a separate license. Otherwise, I would like to know a way to connect…

hi all, got a weird problem on a mac when joined to the domain and sophos is installed and all sophos services are up and running on sophos central and on the local mac i get both green tick so i know sophos is installed/running and happy but as…

I have 3 devices with the same name, 2 of them were "deduplicated" according to my sophos central events, they still share the same name but the last activity of one of them was two weeks ago, is it safe to delete the one I know doesn´t have any activity…

Hi, Is there any option to detect internal network port scans from within the network or networks? Like for example using nmap or netcat or others from inside the local network, not from a wan source. I'm posting this in endpoint as well. Thanks…

Hi all, We have the Zero day protection enabled in the firewall, however the same feature is not available in the Sophos end user agent, What will the difference if any laptop with Sophos end point connected to public network under the Sophos firewall…

hi, since friday we have high cpu with the sophos endpoint defense software process. windows server 2016 sophos central server core version: 2024.2.2.1 after disabling all the features the cpu is back to normal.. any ideas?

Has anybody seen Sophos Intercept X with XDR affecting the drawing of icons in a Finder window on a Mac when connected to a Windows server? I have Enable Real-time Scanning On but Remote files is set to Off on a Mac policy.

Dear members I hope this email finds you well. I would like to inquire if Sophos offers any remote wipe functionality for laptops in case of loss or theft. If so, could you provide more details on how this feature works and its requirements? Thank…

The web anti-virus detection logs are written in the IPS logs at .....

Hi, We have some devices detected as cloned devices by Sophos Central. Old devices last communication time stamp practically same as new device install time. One of them had been cloned twice in last 2 days (3 device copies now). Thanks in advance…

Since 1 or 2 weeks ago, we started receiving reports from users that they were experiencing performance issues at launching / closing some applications on Windows servers. We haven't changed any policies on the servers. If we disable real time scanning…

We have a client that has Sophos Endpoint Protection deployed, but doesn't have a Sophos Firewall. They want to enable 'SSL/TLS decryption of HTTPS websites', but will enabling it actually do anything if you don't have a firewall CA and a deployed certificate…

Can I simply run the Golden Image script https://support.sophos.com/support/s/article/KB-000035040?language=en_US#Script when I want to clone a server VM with Intercept-X installed? Some tests need to be done on the cloned VM before it will be deleted…

Am a bit concerned that the Endpoint trial program I 've installed for a malware scan has uninstalled my antivirus suite (antivirus firewall emails, etc protection). Malware are one thing, antivirus and firewall another. Is my system back on WIndows defender…

We have group of web servers with very large Unpaged Memory used by Sophos. Despite the promise of a fix in the latest agent, all that has happened is the RAM usage gets cleared down on a reboot, it then creeps back up at a rate of 2GB a week. By the…

Hi all, It's possbile to block the port for Endpoint client from Sophos Central ?

When a user has some data on their laptop and attempts to modify or delete it, can Sophos Intercept X Advanced block these actions? Consider an example UserA has some data on their laptop and UserA wants to delete it, can Sophos Intercept X advanced…

Hello, I have the following problem. I have a user with Sophos Endpoint Protection installed that cannot launch any battlenet games. Like Starcraft etc. I have tried to create some exclusion policy for the game but didn't help. If i tamper with…

Hi all, I would like to know about Sophos Intercept X Advanced EP can do for below function. Can it do Web filtering/ Web Block? Can it block some ports , not allow ports? Can it disable USB or external hardisk? Thanks you all.

We found new point under administrative Access on our clients called Device Hardening (Gerätehärtung). Can anyone help me to find out what it is. What did this setting do? Can we adjust it? What is the hardening in detail? many thanks for your…

Hi By default is SSL/TLS decryption of HTTPS websites marked as ON by default? What are the implications or disabling this? Thanks.

I wonder if anyone can help me, I am a user of Sophos Intercept X Essentials Endpoint. As of the middle of February there was an automatic update to one of my products: Core Agent / Sophos Intercept X / Device Encryption which meant that I could no…

There´s a endpoint on my network that sends missing responses to heartbeat it's possible to fix it or make an exclusion to dont check that endpoint We check the possible solutions but all are to risky for us