Sophos Antivirus Is Not Running
If the Protect Computers Wizard fails to install Sophos Endpoint Security and Control on computers, it could be because:
- Sophos Enterprise Console does not know which operating system the computers are running. This is probably because you did not enter your username in the format domainuser when finding computers.
- Automatic installation is not possible on that operating system. Perform a manual installation. For instructions, see the Sophos Enterprise Console advanced startup guide.
- The computers are running a firewall.
- “Simple File Sharing” has not been turned off on Windows XP computers.
- The “Use Sharing Wizard” option has not been turned off on Windows Vista computers.
- You selected to install a feature that is not supported on the computers’ operating systems.
For a full list of requirements for the Sophos Endpoint Security and Control features, see the system requirements page on the Sophos website.
Apple has released a new security mechanism called Secure Kernel Extension Loading (SKEL) in MacOS 10.13. This affects all applications/software using non-Apple kernel extensions and users are required to manually add the affected applications/software into the trusted list before the applications/software can be used. This allows the kernel extensions to load and is required for Sophos Anti-Virus to function properly. Users of MacOS 10.13 are required to do the following steps for newly installed Sophos Anti-Virus:
As of Sophos Endpoint Core Agent 2.7.6, Endpoint Advanced 10.8.7, Server Anti-Virus 10.8.7 and Intercept X 2.0.17, all files and drivers are signed with only SHA256. Running a scan using the Sophos Home main window The Scan Computer button performs a full system scan on Sophos Home free version, and a quick scan for Sophos Home premium version. Double-click on the Sophos Home shield on the system tray. Click on Scan computer button.
1. After installing Sophos Anti-virus, go to “Security & Privacy” under Apple System Preferences.
2. At the bottom of the window, you will see “System software from developer “Sophos” was blocked from loading”. Click “Allow”.
Once authorized, all future Sophos kernel extensions are allowed, even after uninstallation. This step is not required again on a reinstallation. Kernel extensions already installed during an upgrade from MacOS 10.12 are automatically authorized.
For details, please refer to
Sophos Protection
Advisory: Apple MacOS 10.13 High Sierra Support:https://community.sophos.com/kb/en-us/127413#Sophos