I received an alert from Sophos for multiple customers that updates have failed and I was wondering if someone could help me with this. The alert is: Download of WindowsCloudNextGen failed from server http://dci.sophosupd.com Here is a screenshot of…

Hi, We're receiving alerts everyday on a regular basis that computers are out of date or have missed updates. What is causing this issue? What can be done to resolve this issue? Please let me know if anyone has any idea. Thanks and Regards…

Hi All. I am having an issue with multiple machines failing Sophos update over the weekend. This includes relatively new machines. I am receiving the following error: Failed to install sau: general error. I have tried uninstalling but receiving…

Hello there, we got three Laptops where the error message "Failed to install livequery64: general error" is displayed. The affected clients are connected via Cisco Anyconnect (VPN). One client which reported the error on monday was directly connected…

Hi guys, having a (performance) problem with an application. I built a new policy / enhanced the Base Policy and added some (file and process) exceptions. How can I check on one particular client if these exceptions are working as they should? Using…

Why is Sophos asking for Malwarebytes file when I attempt to uninstall it?

Unable to disable Tamper Protection on a Server, despite it is already disabled in Sophos Central Admin. Even when override Sophos Central Policy for 4 hours to troubleshoot is checked, none of the sliders (including Tamper Protection) can be activated…

Hello I can see this has been requested many years ago but can we not have a toast alert popping up to remind users to reboot their machines when the AV engine needs a full system reboot? Yes I can see this within the Sophos Endpoint control panel…

There's a way to limit the disk usage during sophos antivirus scan? We have machines with always active background programs that open and close communications with other machines, but if they have saturated resources, sometimes errors occur and operators…

Has anyone experienced the Network Threat Protection service seemingly will stop and restart at will across multiple machines? There are a couple devices that it doesn't restart automatically on https://100001.onl/ https://1921681254.mx/ but the alerts…

Hello, which product will be better to use in case of Web control? With the new agent rolling out by the end of a month there should be option to use Web control right on endpoint. Does this means, i should use only one Web control or filtering, combine…

Hello All, What is a quick fix when Sophos Endpoint service fails to start and the endpoint is blocked on LAN and WAN due to security heartbeat? This happens on random PCs especially when the software is updated. How to start the service. …

Hello, I am trying to generate a windows 10 image by sysprep, I install the sophos antivirus with the respective step by step to generate the golden image ( https://support.sophos.com/support/s/article/KB-000035040?language=en_US ) and after this I…

Hi, We have a Global Exclusion set for an executable file. We now no longer want this exclusion to take effect. I can't seem to find a way to delete the exclusion. Can anyone help with this? Many thanks.

I have two endpoints at two totally unrelated clients where Sophos detected Mal/Polazert-A. Sophos is good at telling me about it, but it doesn't give me any options to remove it. Every time the client reboots their computer, they get a popup from Sophos…

In sophos endpoint protection, there was an issue regarding restarting when using the services in windows server 2016. sophos agent in machine shows an error massage. It's shows "some sophos services are not running please contact it"

The Sophos EP installation on a computer of a colleague yesterday screwed up yesterday. It was red in Central and had no Heartbeat. The endpoint showed a log I've just seen for the first time. The english translation is like "Sophos IPS no longer…

When installing this old, legitimate Microsoft file on two different Server 2022 machines: Microsoft Visual C++ 2008 Redistributable Setup v 9.0.30729.5677 https://download.microsoft.com/download/5/D/8/5D8C65CB-C849-4025-8E95-C3966CAFD8AE/vcredist_x86…

Hello all, is there no way to add the instance ID of a device manually? First blocking the stick being a requirement is very unpractical for bigger companies. The documentation of the exemptions is also very bad, after you made an exeption you dont see…

I'm trying to uninstall sophos agents and other modules but stuck at failed and cannot connect to service errors for each and every module . We have deployed another AV solution and both are making the use of workstations impossible.I have tried running…

Hi, I am using Sophos Intercept X, I have a client that does not update (agent) Core Agent 2.19.8 Endpoint Advanced: 10.8.11.1 What amazes me that this is not displayed in red in the dashboard: - / Can you help me to get the message up to date? I get…

I cannot find "\clusterserviceaccount\Local Settings\Temp" directory on a failover cluster in Windows 2012R2. However, in the documentation ( support.sophos.com/.../KB-000033343 provided by Sophos, this directory should have an exclusion rule in Sophos…

Hi, we need to deploy Sophos Intercept X client to all domain workstations, but we need to avoid UAC prompt. Is this possible? Thanks all, Max

Hey I need to check here if the Windows11InstallationAssistant has been realsed as i can not see that in our central portal? Thank you

Hey folks, Does anybody know how and what triggers ransomware attack detection? We have a process via batch script and it calls for GPG.exe encryption on the files. This process are executed via remote workstation, and the target files are from our…