• Remove Intercept X Essentials completely on macOS

    Rob Coenen
    Rob Coenen
    Hello, A customer of ours had an old MacBook and transferred it, via Apple's migration assistant, to a new MacBook. Now today I wanted to install Sophos Intercept X Essentials but the installer indicated that the product was already installed. However…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Is Sophos CPU history recorded in Data Lake?

    PK1
    PK1
    Is Sophos CPU history recorded in Data Lake?
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Logs results for deploying Sophos AV through Zenworks application

    Nomfundo Sindane
    Nomfundo Sindane
    2024-10-09T10:57:58.328Z [28444:19396] I Begin IProductSetup2::Install for CRT 2024-10-09T10:57:58.330Z [28444:19396] A Constructing installer for CRT 2024-10-09T10:57:58.330Z [28444:19396] I Running: CRT installer 2024-10-09T10:57:58.330Z [28444:19396…
    • Answered
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Cleaning AD of old Sophos installations

    Fred_B
    Fred_B
    We have used Sophos for a long time and as a result our Windows AD is littered with old Sophos users and groups that are no longer used. In the past we used Sophos SAV, Enterprise Library, Puremessage and SQL DB. Currently we use Sophos Central, Endpoint…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Protected devices/users

    Josefina Frutos
    Josefina Frutos
    Hi! I wanted to know if there is a way to download the list of users and the serial numbers of the computers assigned to them. From what I've seen in the reports section, it doesn't allow modifying the columns. Do you know if it's possible to download…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Need command to identify BitLocker is managed by Sophos Encryption on the PC itself

    ArtL
    ArtL
    I have identified a problem with Sophos Encryption, and I need to do a validation before bringing it up with Support as an issue. I can run a powershell command (as seen below) to find the encryption status however it doesn't tell me that it was Sophos…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • MacOS Agent Deployment via Intune - Allowing System Extensions

    Jason Bristow
    Jason Bristow
    Hello, I am looking for help with deploying Sophos Endpoint to MacOS via Intune. Specifically, I would like help configuring the configuration profile to set the permissions for: Full Disk Access system extensions notifications You have…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Application Control Policy Not Working

    ptho
    ptho
    Hi Sophos, I can't get the Application Control policy to block Proxy / VPN Tools. I've tried to edit the Base Policy as well as create a new policy and neither seem to work. See the attached image. I have tried selecting all VPN / Proxt Tool objects…
    • Answered
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Intercept X endpoint on server incorrectly using real time scanning on Class B 172 internal IP addresses

    Tim Nightingale
    Tim Nightingale
    I have a customer environment where the server has multiple NICs and IP addresses. The client stores very large video files on the server. Each recording studio has a dedicated 10GBps LAN link to the server and each is on a 172.19.x.x/24 Class B internal…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Endpoint performance recommendations?

    David Kucera
    David Kucera
    Hi, we are a new partner coming from an ESET ecosystem, looking to replace it with Sophos for our customers, since we are using XGS and it makes sense to integrate Endpoint as well. While testing Intercept X in our environment first, my developers…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • beach ball on mac on logon screen

    Sophos User1175
    Sophos User1175
    hi all, got a weird problem on a mac when joined to the domain and sophos is installed and all sophos services are up and running on sophos central and on the local mac i get both green tick so i know sophos is installed/running and happy but as…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Endpoint causing network to disconnect when transitioning from wired / wireless

    OtherUTMGuy
    OtherUTMGuy
    Sophos Endpoint running reliably in our environment for 5-ish years. There is a message / cache server on-prem that supports our clients, and we've had no major issues. All Dell Latitude / OptiPlex equipment. In this specific example, I'm using a Latitude…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • New Techvids Release - Sophos Central: Endpoint Migration with Sophos API

    New Techvids Release - Sophos Central: Endpoint Migration with Sophos API

    Sophos
    Sophos
    In this video, we walk you through migrating endpoints between Sophos Central accounts using the Sophos API. Learn how to prepare your devices by creating API credentials, enabling Device Migration in Sophos Central, and authenticating with the new credentials…
    • 2 months ago
    • Sophos Endpoint
    • Release Notes & News
  • How query 35 Sub-Estates from Sophos Central Intercept X Advanced

    volpedan
    volpedan
    Hi Community, I would like to be able to query the Sophos Sub-Estates db with SQL. I read that there is Live Discover service for queries, but I wonder if it can be purchased with a separate license. Otherwise, I would like to know a way to connect…
    • 2 months ago
    • Sophos Endpoint
    • Discussions
  • Deduplicated devices

    Fernando_Munoz
    Fernando_Munoz
    I have 3 devices with the same name, 2 of them were "deduplicated" according to my sophos central events, they still share the same name but the last activity of one of them was two weeks ago, is it safe to delete the one I know doesn´t have any activity…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Alert - WIN-INI-PRC-VEEAM-BACKUP-SUSP-CHILD-PROCESS-1

    Gleison Lichtenfels
    Gleison Lichtenfels
    Hello everyone, Is anyone else getting "High-Risk" detections " WIN-INI-PRC-VEEAM-BACKUP-SUSP-CHILD-PROCESS-1 " from Veeam Backup and Replication? Parent Command Line: "C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.Service…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • ERR_SSL_VERSION_OR_CIPHER_MISMATCH - no certificate in browsers on a LAN

    Eddy_Appels
    Eddy_Appels
    Hi, We have a customer that has a Sophos XGS126 running SFOS 20.0.0 GA-Build222. and they also have Sophos Endpoint on clients and servers (all Windows). They have an external website that they can't reach and where they get this error in the (any…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • ScanD not running on mac

    Sophos User1175
    Sophos User1175
    hi all, installed sophos endpoint multiple times but i get the same thing everytime, the service ScanD is not running I have disabled SIP so sophos can install unsigned drivers which has worked as before SIP was enabled it was blocking the "network…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • remove without tamper code

    Sophos User1175
    Sophos User1175
    hi all, how would i remove sophos endpoint on a mac please without knowing the tamper code, as when i go on sophos central i cant get the macs tamper code as it hasnt registered the mac, so theres no way of finding the tamper code thanks, rob
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • INTERCEPT X DETECTIONS

    Ahmed Khalil Abidi
    Ahmed Khalil Abidi
    (Browser-Specific): Threat Protection policies only detects malwares in Firefox when accessing the eicar website but failed to detect it using Chrome. also, what is this behavior, it keeps detecting the malware, cleans it, but never kills the sophos_hips_test…
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • ¿cuál es la diferencia entre ID de modelo e ID de instancia? al crear excepción de periféricos

    NTM
    NTM
    Buenos Día comunidad, Alguien sabe ¿cuál es la diferencia entre ID de modelo e ID de instancia? al crear excepción de periféricos . Muchas gracias.
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Veeam backups failing. Bypass RTS fixes

    Anthony Flynn
    Anthony Flynn
    Veeam B&R version 12.2.0.334 keeps failing unless I disable/override Real Time Scanning > Files. We have put in place all relevant exception rules that I can find on the Sophos support portal but I find I'm still having issues caused by the RTS. …
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Threat Protection - how to trust a file?

    Michael Wallis
    Michael Wallis
    Hi, We have a Sophos Intercept-X user that has problems running End of Month reports via Excel in a certain CRM application. He is the only user requiring this functionality. We have tracked the issue down to being a .XLL (I assume that is an Excel…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Device Encryption - Password protect files for secure sharing

    Nico00
    Nico00
    Hello, we decided to activate the file protection option in Sophos Device Encryption. What type of encryption is being used within the HTML5 Containers ? BR
    • Answered
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • Port scan detection internal network

    @wajdiaa
    @wajdiaa
    Hi, Is there any option to detect internal network port scans from within the network or networks? Like for example using nmap or netcat or others from inside the local network, not from a wan source. I'm posting this in endpoint as well. Thanks…
    • 3 months ago
    • Sophos Endpoint
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
<>