• Formulate URL web link to detection

    AnnMarie Norcross
    AnnMarie Norcross
    I am writing an integration with Sophos EDR and I'd like to have a clickable link from our SOAR platform to a detection in Sophos. Is there a was to formulate this link or is it accessible via REST API? I'm looking for something like "{sophos-console…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Endpoint update logs

    Randy Cleveland
    Randy Cleveland
    Hi, Is there a way to see what update server endpoints are talking to? There used to be a log of the communication that clients had with the update servers or update cache servers, but I can not find it anymore. If anyone can point me in the right…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • cloned VM for testing purpose - fix Sophos Central GUID with golden image script?

    LHerzog
    LHerzog
    Can I simply run the Golden Image script https://support.sophos.com/support/s/article/KB-000035040?language=en_US#Script when I want to clone a server VM with Intercept-X installed? Some tests need to be done on the cloned VM before it will be deleted…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Status on WINEP-49518 (PAM x PrivGuard)

    Gabriel Doring
    Gabriel Doring
    Hi Everyone, Do we have any news or information on whether this issue will be resolved or not? We have a BIG client of ours that is considering ditching Sophos Endpoint because of this problem... Sophos Central Admin: PrivGuard feature blocks application…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Best way to monitor a folder on an SMB network share?

    LeChuck
    LeChuck
    Hello I can't find a way to easily monitor a folder on a mounted smb network share. For reasons not in the scope of this post it's not an option to install sophos on the actual file server. The host that would monitor the specific folder on this…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • Scanning in the safe mode

    Damian Kowalik
    Damian Kowalik
    Hello there, How can I run my Sophos AV on a device while in safe mode (Windows 11 Pro)? Which executable file I should click to start scanning against threats? Kind Regards, Damian
    • Answered
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • osquery crushing CPU on Ubuntu 22.04 Server

    Adam Obringer
    Adam Obringer
    In relation to this, which is a closed thread with no real solution: Extreme High CPU Usage with sophps protection with Linux I'm a bit confused here. We have this issue reoccurring on a Linux server at this point, entirely randomly. osqueryd eats up…
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • RE: Sophos intercept X advanced

    Vinay A S
    Vinay A S
    Hi Abhimanyu, "Recently, we deployed Sophos Intercept X Advanced for one of our customers. Now, they are facing system slowdowns. Could you please help me resolve this issue?
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • How can I search for a MD5 Hash with Sophos EndPoint

    Hans_Dampf
    Hans_Dampf
    I have a hash like: 6ea2c9276c122222222222f9ae2 i want to search on the clients for this hash. is there a posibility to search with Sophos EP?
    • 5 months ago
    • Sophos Endpoint
    • Discussions
  • all kinds of Sophos endpoint user get other users update notifications.

    ab awal
    ab awal
    All Sophos agent users get a notification ( Access to computer "x" denied because it may be unsafe). This notification gets recently all user, thing is that all users any users get other users notifications.
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Malicious behavior ('Lockdown') prevented

    Andreas Sandner
    Andreas Sandner
    Hello, recently we've had multiple issues that Intercept X prevented installation or execution of software because it suposedly prevented "Lockdown". It likes to block our remote maintainance software because of this, and today I was unable to install…
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Anti-virus protection with Endpoint ?

    Bordeianu Daniel
    Bordeianu Daniel
    Am a bit concerned that the Endpoint trial program I 've installed for a malware scan has uninstalled my antivirus suite (antivirus firewall emails, etc protection). Malware are one thing, antivirus and firewall another. Is my system back on WIndows defender…
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Authenticator app QR code

    Bordeianu Daniel
    Bordeianu Daniel
    Hello. Have read about good detection rates on your engine and thought to check with Endpoint a possible ransomware/ransomware situation. First time user, yet to install the trial version, after the email and password are accepted, and that email code…
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • File scanning causing very large data files and RAM usage (unpaged pool)

    Jeremy Roberts
    Jeremy Roberts
    We have group of web servers with very large Unpaged Memory used by Sophos. Despite the promise of a fix in the latest agent, all that has happened is the RAM usage gets cleared down on a reboot, it then creeps back up at a rate of 2GB a week. By the…
    • Answered
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Windows 11 ARM

    Anthony Hill
    Anthony Hill
    Does Sophos (Intercept X) work on the New Arm processors for Windows 11 Surface Laptops? If so where do we get the Intercept X download from/for Sophos Central? Thanks.
    • Answered
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Blocking of Custom File type for execution

    Shashank Khamkar
    Shashank Khamkar
    Dear Team, Can we Block Batch file execution or Command Prompt through Sophos Endpoint Protection? If yes then Kindly provide a KB article.
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Sophs Central control

    Nyein Chan Zaw
    Nyein Chan Zaw
    Hi all, I have installed Sophos EP in client and it's possible to control "no internet access and only the website that allow from Sophos Central" ? or can block all http and https from Sophos Central ?
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Can block the port for Endpoint client from Sophos Central ?

    Nyein Chan Zaw
    Nyein Chan Zaw
    Hi all, It's possbile to block the port for Endpoint client from Sophos Central ?
    • Answered
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos DLP Inside file Content Blocking

    Shashank Khamkar
    Shashank Khamkar
    Dear Team, Can we block a content in a file such as adhar card number sent in a file or so.
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • DLP Block message missing

    Matthew Gaston
    Matthew Gaston
    Hi Folks, Currently setting up a DLP policy for my company. The rules we have set up work as expected, for instance the rules we have set up to " Allow transfer if user confirms" successfully prompt the user with a popup that asks them to confirm/ block…
    • Answered
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos intercept X advanced

    Vinay A S
    Vinay A S
    When a user has some data on their laptop and attempts to modify or delete it, can Sophos Intercept X Advanced block these actions? Consider an example UserA has some data on their laptop and UserA wants to delete it, can Sophos Intercept X advanced…
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • One or more Sophos services are missing or not running One or more Sophos services are missing or not running

    Vinay A S
    Vinay A S
    Dear Team, While installing Sophos Intercept X Advanced agent on Mac its showing One or more Sophos services or not running. Kindly help me with this issue.
    • Answered
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • sophos ransomware / malware attack lab

    Nyein Chan Zaw
    Nyein Chan Zaw
    Hi all, It's possible to test lab and can capture fo ransomware / malware attack ? Thanks you all.
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Adding exceptions to Peripheral Control policy

    Roman Blaszkowski
    Roman Blaszkowski
    Hi, School I'm working at has decided that all removable USB Memory sticks are to be banned and restricted only to specific departments. It's all well and good, but there will be an influx of new devices, that would have to be added as exceptions and…
    • Answered
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • Install Sophos endpoint on devices with multiple NIC/IPs

    CarlosLS
    CarlosLS
    Hi, I need to install Sophos endpoint on some computers with a particular situation, description below: These computers have 2 or 3 IP addresses, each belonging to a different network. They are shared between employees from different companies,…
    • 6 months ago
    • Sophos Endpoint
    • Discussions
  • View related content throughout Sophos Endpoint
  • More
  • Cancel
<>