• Sophos Install and Uninstall on Mac OS 14.2

    Eric Svetcov
    Eric Svetcov
    I am struggling to install the endpoint agent on Mac OS 14.2 and so I decided to uninstall on my test Mac and reinstall to try to figure out the instructions and now I'm stuck. I ran the uninstall (which partially failed) and then deleted the Sophos folder…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • SOPHOS and Hanwha camera servers with Windows OS.

    Sid Wallace
    Sid Wallace
    I am the admin for quite a number of Hanwha camera servers. Several in particular are in a school system. Once our servers were installed, unknown to us, they deployed SOPHOS on the servers. Now we are seeing numerous crashes, lockups, packet losses and…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Turn On Data Protection for all organization

    Alex Ulloa
    Alex Ulloa
    Trying to turn on Data Protection but in the Sophos help section keeps showing outdate instructions and Google is not helping either. Check all Global settings for tenant and EndPoint and can't find the buttom to enable, please help
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Any way to query events for 'Applications and Services Logs' via Live Discover?

    iamroot
    iamroot
    Hello everyone, I understand there is a way to query for event logs in Live Discovery. From what I see, it may be limited to Windows Logs only i.e Application, Security, Setup, and System event logs. I tried querying an event id, but it pulled from…
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Central- Pulling Threat Analysis Center logs via API

    Dogan Sonmez
    Dogan Sonmez
    We need to pull "Threat Analysis Center" logs via API. When we look at guides on sophos there are just "alert", "event" queries to pull events. Could you help us, please?
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • please improve Lockdown uninstall approach

    LHerzog
    LHerzog
    We have decided to uninstall SLD from all servers where it was installed but unlocked. What a strange behaviour, that it installs itself back some time after you remove and reinstall the Sophos endpoint software completely. Then you find, you need…
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • live discovery query for: web browsing activity of MAC device

    Hemanth Kurungat
    Hemanth Kurungat
    Hi, Please let us know if there is a sql query for get all web browsing activity of user/ computer for MAC devices on sophos central. I found we have inbuilt query available for Windows as : "URLs accessed on Windows (Data Lake)". Kindly let…
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • What is the difference between CIXH1CSAA and CIXA0U12AANCAA?

    Aung Thaw Thaw
    Aung Thaw Thaw
    I request Sophos Central Intercept X Advanced quotation from the distributor. First, they gave quotation with model number CIXH1CSAA and when I request discount for that our distributor gave us new quotation with new model number CIXA0U12AANCAA. I found…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Bluetooth headphones are not working Even it is allowed in the policy

    Hemanth Kurungat
    Hemanth Kurungat
    Hi, Our client has some issues, related to central endpoint protection 1. Bluetooth headphones are not working Even it is allowed in peripheral control policy. We have checked a JBL Bluetooth headphone, even the user has full access in peripheral…
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • tcpip.sys blue screen

    Kent_166
    Kent_166
    Hi all, I've been having random workstations blue screening since christmas and all reports point to a driver issue, all of the drivers were so far intel ethernet cards until this morning when my own laptop bluescreened. I've found this article but…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • SMB-RR-Server Protection InterceptX

    satyabrata bastia
    satyabrata bastia
    Hi, we are getting above quote from vendor ----SMB-RR-Server Protection InterceptX we are using on-premises server. how to install in physicals and virtual machine if both are present in same machine and its required same software or different.…
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • [CXIA]How to handle Sophos ID and CXIA License Key binding error?

    archilife archilife
    archilife archilife
    Our group has multiple companies, including company A and company B. Three years ago, the Sophos local reseller mistakenly entered the Sophos ID of company B with the License Key purchased for company A. This resulted in the LICENSE SCHEDULE for company…
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Protection for Linux Maximum File Size

    SophosUser12
    SophosUser12
    Hi does Sophos Protection for Linux have a maximum scannable file size, can it be modified? thanks,
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos AMSI Protection Logging - Turn Off

    Jerome Nillasca
    Jerome Nillasca
    Dear All, Hope you are all doing well. I have a question regarding AMSI Sophos Protection. Is it okay to turn off AMSI logging? Turn off AMSI logging to resolve compatibility issues – Sophos Home Help Since we upgraded our workstations to Windows…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Endpoint not working with DLP

    Sarvesh Singh
    Sarvesh Singh
    Hi, I have DLP solution named Somansa which is installed at one of my clients place along with Sophos Antivirus. There I have enabled Application blocking through Somansa DLP which is working fine in the system where Sophos is not installed but same…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Retrieve more information of client devices?

    Vincent Luckmann
    Vincent Luckmann
    Hello dear Sophos Community, we have some old devices in our company and I noticed that the sophos agent collects data like Processor structure and Operating System but now my question is; Can I get Sophos to collect more information than this from…
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Using Sophos in an MSSP/SOC mode

    Dhamir MANNAI
    Dhamir MANNAI
    Greetings to all. Is it possible to have two different "customers" and have ONE group of "Admin" users manage both of them. That is, one SOC-Analyst can belong to both spaces and handle "cases" for both customers?
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Install issues on Linux

    Jersson Andrango
    Jersson Andrango
    This software is governed by the terms and conditions of a licence agreement with Sophos Limited Performing pre-installation checks to verify whether SPL can be installed on this machine INFO: Verifying connections to Sophos Central WARN: Server cannot…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Datalake Query windows_programs with some empty "name" columns

    Philippe Hirzel
    Philippe Hirzel
    I am playing around with the XDR Datalake. The goal is to use the XDR Datalake for our inventory. So we do not have manually update it. I can get all installed software from the Datalake thanks to the query "windows_programs". However in this query…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Licensed XDR with NDR sensor?

    Andre Soares
    Andre Soares
    Hello, We have the Intercept X Advanced with XDR license, will we need a new license if we want to implement the NDR Sensor or does our license already include this sensor? When will it be released? Thanks André Soares
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Active Directory Sync Setup "The LDAP server is unavailable"

    Gavin Renn
    Gavin Renn
    Hey guys, I am trying to set up Sophos AD Sync on a new domain controller (Windows Server 2022 Datacenter) and I keep getting the error "The LDAP server is unavailable". This happens regardless of LDAP with SSL or insecure connection on port 389, different…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Utilizing Intercept X on Windows 7

    Fox Medo
    Fox Medo
    We are facing a situation where we need to use Intercept X with Windows 7. The challenge is that the client cannot upgrade the system due to incompatibility with certain medical instruments. We are considering using Intercept X as an antivirus solution…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Disk SSD SATA 100% with Intecept X

    Andres Ulloa
    Andres Ulloa
    Dear All: Along with saying hello and hoping that you have enjoyed a nice end-of-year holiday with your families, write to ask them the following: Our company has Sophos Intercept 100%. Strangely it is not just the Sophos processes that take the disk…
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • news on Heartbeat for Sophos SPL (Linux Endpoint)?

    LHerzog
    LHerzog
    Hi and happy new year. What about new features? SPL with Heartbeat? Will it come some day? Last info was this is somehow planned. Heartbeat for Sophos Protection for Linux (SPL)
    • Answered
    • 11 months ago
    • Sophos Endpoint
    • Discussions
  • Sophos Central Endpoint: Sophos Central API Tamper protection toolkit

    IsmailJaweed
    IsmailJaweed
    Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Overview This article describes how to create a PowerShell script…
    • 11 months ago
    • Sophos Endpoint
    • Recommended Reads
  • View related content from anywhere
  • More
  • Cancel
<>