Hi there, we're using Sophos Central Intercept X in our domain and want to add a policy, that prevents our users to run or copy files from e.g. usb drives. We want even go one stop further: we want to create such a rule in general, but want to allow…

Hi Community, I have just finished migrating clients from Sophos on-premise management to Sophos central; the license we use is Intercept X Advanced. According to Sophos Central the Web-Control Policy I created is used for our domain-users. However…

Hello There is an issue with missing instance ID of mobile phones in Sophos, which makes impossible to effectively manage them. I see windows is finding instance ID of apple iPhone correctly: I think there could ba a problem with string which…

Hello Community, In the WebControl policys we have the options for the risky file types. As default setting, I want that my users are getting a warn page when they are downloading a Windows Executable. (or if they are loading in the background of…

Dear Community, I have a dilemma about controlled updates and Sophos Central's update management policy. I describe the case: In my Sophos Central console, exactly in controlled updates, I have them paused, since I have outdated Windows computers…

All of our users (AD) can work with any endpoint server or computer, through remnote desktop or Citrix, all of them are protected throught Sophos Intercept X. But I don't know if there is a centralized place to manage all my Sophos Central policies without…

Hello everyone, I have some questions regarding Sophos Central Computer groups: - Is it possible for a computer or server be part on 2 or more groups at the same time? - Is it possible to create some kind of automatic group assignation rule…

My Baseline Application Policy policy has various categories blocked. Works well. Now I want some IT team members to have access to a few apps that are blocked by the Baselines Application Policy. So, do I either a) clone the Baseline policy, unselect…

Hi All, On October 21, 2018, we released a policy update for Macs, which updated the strength of the updating password encryption. This has resulted in some Macs reporting Policy Non-Compliance: Updating, as the systems took in the new encryption. The…

Hallo, wir haben in den Server Protection Richtlinien beim WebControl einige Seiten mit Warnhinweisen versehen. Diese werden beim ersten Aufruf der Seite auch ordentlich angezeigt. Beim nächsten Aufruf aber nicht mehr, bis der Browsercache gelöscht…

So I have a bunch of alerts on sophos central from devices that have been deleted, so when i click on the device it says that the device has been deleted, so I figured that maybe reinstalling endpoint on that device will somehow fix it, turns out it didn…

The RCA component in the Sophos EDB console is a great feature, but can we trust the analysis? We've got 100s of endpoints on which the PUAs and malwares are detected and 100s of tickets generated in the ticketing tool. 1. Do we have to collect…

We use MFA to keep the access to sophos central safe. When i want to sync my local AD to Sophos central I have to use a user account with access to sophos central. When I use one of our admin accounts (With MFA) the credentials are wrong When I…

I posted this elsewhere, scheduled scanning does not seem to be running in Sophos Central. All computers are scheduled to scan at 9:00 pm on Friday. That policy is still enabled No scans have run. What could be the problem. This worked in the past until…

I have been installing Sophos Endpoint Security and control for years and noted that the listing on "Vulnerable and Executable" file types (Extensions) was visible in the client when you have local amin rights. This file extension list was contained in…

Hi, When excluding files & folders in Sophos Central, do processes that launch from inside that folder also get excluded?? For example, if we exclude the Visual Studio folder ( %programfiles(x86)%\Microsoft Visual Studio\ ), does this simply mean…

Excuse the cross-post from Endpoint Security , I wasn't sure where the right place to ask this question would be. In the below scenario, how do I allow User02 to use USB03 only on endpoints in EndPtGroupB? This is in Central and not On-Prem Endpoint…

Hello I have the DLP base policy active for General organisation activities [UK]. With this policy active I have this issue: If I attach a USB storage device to a PC and right click it to add a new Text Document (for example). It is blocked by Sophos…

I dont know about others but in the course of IT Audits i am finding certain information requests as it relates to antivirus more difficult to satisfy with Central. While i Have faith in the central platform, auditors request verification of certain controls…

Hi everybody, Is there a such a feature that export the policies from sophos central later import to client on windows? How do we do that? Is there a setting for pcs that are not connected to the internet or connect or for PCs that has only connected…

after server antivirus program version upgrade, our application was not working. when we off real time scan then our application is work normal. we tried to exclude application folder but problem is same, kindly help us.

I'm trying to get DLP working through Central and have found something that I can't quiet believe hence this post. If I have a policy that detects content and I do a new email in Outlook and use the paperclip "Attach" icon to attach a file with sensitive…

Hi team, I´m new with sophos and we need set our 'CENTRAL' policies in a way that EVERYONE shoulbe use the default policies but we have board directors who shou use a specific ("more relaxed") policy. I used the article below but the user has…

Hello, I have two questions about adding websites to the Global Scanning Exclusions list in Sophos central: If I add, for example, google.com - does this cover all subdomains for google.com like a.google.com, b.google.com, c.google.com etc.. or…

Hi all, I have a question about Sophos Central End User Protection, we have the base policy applied to all users, in this policy Youtube is blocked but we want them to access to a certain channel in this platform. Is possible to implement this kind…