• Intercept X endpoint on server incorrectly using real time scanning on Class B 172 internal IP addresses

    Tim Nightingale
    Tim Nightingale
    I have a customer environment where the server has multiple NICs and IP addresses. The client stores very large video files on the server. Each recording studio has a dedicated 10GBps LAN link to the server and each is on a 172.19.x.x/24 Class B internal…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Endpoint performance recommendations?

    David Kucera
    David Kucera
    Hi, we are a new partner coming from an ESET ecosystem, looking to replace it with Sophos for our customers, since we are using XGS and it makes sense to integrate Endpoint as well. While testing Intercept X in our environment first, my developers…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • beach ball on mac on logon screen

    Sophos User1175
    Sophos User1175
    hi all, got a weird problem on a mac when joined to the domain and sophos is installed and all sophos services are up and running on sophos central and on the local mac i get both green tick so i know sophos is installed/running and happy but as…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Protected devices/users

    Josefina Frutos
    Josefina Frutos
    Hi! I wanted to know if there is a way to download the list of users and the serial numbers of the computers assigned to them. From what I've seen in the reports section, it doesn't allow modifying the columns. Do you know if it's possible to download…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Deduplicated devices

    Fernando_Munoz
    Fernando_Munoz
    I have 3 devices with the same name, 2 of them were "deduplicated" according to my sophos central events, they still share the same name but the last activity of one of them was two weeks ago, is it safe to delete the one I know doesn´t have any activity…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Alert - WIN-INI-PRC-VEEAM-BACKUP-SUSP-CHILD-PROCESS-1

    Gleison Lichtenfels
    Gleison Lichtenfels
    Hello everyone, Is anyone else getting "High-Risk" detections " WIN-INI-PRC-VEEAM-BACKUP-SUSP-CHILD-PROCESS-1 " from Veeam Backup and Replication? Parent Command Line: "C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.Service…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • ERR_SSL_VERSION_OR_CIPHER_MISMATCH - no certificate in browsers on a LAN

    Eddy_Appels
    Eddy_Appels
    Hi, We have a customer that has a Sophos XGS126 running SFOS 20.0.0 GA-Build222. and they also have Sophos Endpoint on clients and servers (all Windows). They have an external website that they can't reach and where they get this error in the (any…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • ScanD not running on mac

    Sophos User1175
    Sophos User1175
    hi all, installed sophos endpoint multiple times but i get the same thing everytime, the service ScanD is not running I have disabled SIP so sophos can install unsigned drivers which has worked as before SIP was enabled it was blocking the "network…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • remove without tamper code

    Sophos User1175
    Sophos User1175
    hi all, how would i remove sophos endpoint on a mac please without knowing the tamper code, as when i go on sophos central i cant get the macs tamper code as it hasnt registered the mac, so theres no way of finding the tamper code thanks, rob
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • ¿cuál es la diferencia entre ID de modelo e ID de instancia? al crear excepción de periféricos

    NTM
    NTM
    Buenos Día comunidad, Alguien sabe ¿cuál es la diferencia entre ID de modelo e ID de instancia? al crear excepción de periféricos . Muchas gracias.
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Veeam backups failing. Bypass RTS fixes

    Anthony Flynn
    Anthony Flynn
    Veeam B&R version 12.2.0.334 keeps failing unless I disable/override Real Time Scanning > Files. We have put in place all relevant exception rules that I can find on the Sophos support portal but I find I'm still having issues caused by the RTS. …
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Threat Protection - how to trust a file?

    Michael Wallis
    Michael Wallis
    Hi, We have a Sophos Intercept-X user that has problems running End of Month reports via Excel in a certain CRM application. He is the only user requiring this functionality. We have tracked the issue down to being a .XLL (I assume that is an Excel…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Device Encryption - Password protect files for secure sharing

    Nico00
    Nico00
    Hello, we decided to activate the file protection option in Sophos Device Encryption. What type of encryption is being used within the HTML5 Containers ? BR
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Quero realizar remover o sophos endpoint em 750 deskotp nao estou conseguindo realizar pela GPO e nem via bat favor poderia me ajudar

    Walberto Denis Araujo
    Walberto Denis Araujo
    Quero realizar remover o sophos endpoint em 750 deskotp nao estou conseguindo realizar pela GPO e nem via bat favor poderia me ajudar
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Is the Zero day protection is available in Sophos end user agent?

    Firewall Monitoring
    Firewall Monitoring
    Hi all, We have the Zero day protection enabled in the firewall, however the same feature is not available in the Sophos end user agent, What will the difference if any laptop with Sophos end point connected to public network under the Sophos firewall…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos updates has failed for more then one month (download error)

    Pradeep M
    Pradeep M
    Hello Team, One of my clients is using Sophos Intercept X Advanced, and they are facing an issue where changes made in the Sophos Central console are not reflecting on the employee's machine. kindly find the screenshot for your references…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos blocking Veeam Agent on Windows 11

    Tony Graham
    Tony Graham
    I have a problem with Veeam backup agent with Sophos Endpoint Agent installed If I uninstall Sophos Endpoint I am able to backup the PC. If Sophos is installed it is blocked. I assume this is a matter of somehow unblocking the app or opening some…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos affecting the Finder on Mac when connected to a Window server

    Gerald Horn
    Gerald Horn
    Has anybody seen Sophos Intercept X with XDR affecting the drawing of icons in a Finder window on a Mac when connected to a Windows server? I have Enable Real-time Scanning On but Remote files is set to Off on a Mac policy.
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • cookieguard is no longer valid

    ong! L
    ong! L
    Recently, it was found that someone frequently tried to log in to our webpage background, but failed, after several days of investigation The company found out internally that the browser data was stolen, and then found that the cookieguard module was…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Inquiry Regarding Remote Wipe Feature for Laptops

    Michael9609
    Michael9609
    Dear members I hope this email finds you well. I would like to inquire if Sophos offers any remote wipe functionality for laptops in case of loss or theft. If so, could you provide more details on how this feature works and its requirements? Thank…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • DLP to check about various external domains in an e-mail message.

    Cleber Vicentini
    Cleber Vicentini
    Hi, Anyone knows how to configure Sophos DLP, or other tool, to check fields To, CC, Bcc for existing multiple external domains? Example: TO: cccc@gmail.com;bbbbb@hotmail.com In cases when more than one external domain is fond, stop to send e-mail…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • File control by extension

    Alves
    Alves
    Hi guys, Is it possible to block certain files when they are executed? For example, block all .EXE files when they are clicked
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • About C2_10a (T1071.001) Detected on the server

    ong! L
    ong! L
    Endpoint appears as malicious behavior, but shouldn't detecting c2 be the purview of IPS? Why is it showing malicious behavior? Or is the ips module already involved?
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Endpoint SSL/TLS Decryption - managed exclusion list

    Stefano Tortiello
    Stefano Tortiello
    Hi is there a managed exclusion List for the Endpoint SSL/TLS Decryption module? I only found the possibility to add custom URLs as exclusion. We use Sophos Firewall as well and there is the URL Group " Managed TLS exclusion list" with a bunch of…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Local log write error

    ong! L
    ong! L
    The web anti-virus detection logs are written in the IPS logs at .....
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
<>