Sophos knowledgebase articles

During the upgrade of the SafeGuard Client, the setup checks for the presence of BitLocker encrypted devices. In some cases, the Operating System may not respond to the check which causes the issue. The setup checks for the BitLocker encrypted drives can be suppressed using a specific Windows Installer transform file, available in the Knowledge Base Article.

The Knowledge Base Article explains the required steps to establish a normal boot process again after the mainboard of a machine has been replaced that was protected by the Sophos SafeGuard BitLocker Client using TPM and PIN as startup protector.

This article provides links to Release notes and a range of knowledgebase articles relating to this product.

This KBA describes a lock delay issue, that might occur under certain circumstances.

This article describes the dependencies of the initial encryption, which can be configured in application based encryption policies.

How to change the balloon tip behavior of the SafeGuard Enterprise client tray icon

The Windows 10 (version 1709) feature Improved Boot Up Experience is incompatible with SafeGuard Enterprise Client. If this feature is enabled, the keyring of a user will not be available after logon. Improved Boot Up Experience is enabled by default and can be disabled under the Privacy section of the Sign-in options page.

Users were unable to create a new Google/Sophos Authenticator (aka GA/SA) two factor authentication option due to the QR image not being generated properly. This issue only affects attempts to create a new GA/SA option, and does not affect logging in with previously created codes.

Available recovery scenarios for SafeGuard Enterprise.

This covers what to consider when upgrading to macOS 10.13 High Sierra with an installed Sophos Central Device Encryption Client

By default only SSL3 and TLS1.0 are enabled in Windows 7 and Windows 8. By default only SSL3, TLS1.0, TLS1.1, and TLS1.2 are enabled in Windows 8.1 and Windows 10. The SafeGuard Client on Windows 7 or 8.0 does not override the default setting and fails if the IIS is not accepting TLS1.0. This issue is fixed with the release of SafeGuard 8.0 Client and with the SafeGuard 7.00.2 Client TLS hotfix packe available in this Knowledge Base Article.

This article describes a fragmentation and re-assemble issue while connecting to a SonicWall VPN client.

Sophos is investigating reports of Enterprise Dashboard Admins unable to view Logs and Reports when launching into a Sub-Estate.

This article provides information on creating an application with the required permissions to connect your Central account to Azure.

Development will be performing routine maintenance & updates to Sophos Central on Saturday April 13th, 2019 starting at 9:00 AM EST / 1300 UTC and lasting approximately five hours.

An issue was identified with interface services between Salesforce.com (SFDC) and Central Partner Dashboard and had now been resolved.

List of known issues reviewed and acknowledged by Sophos for Sophos XG Firewall, Intercept X, iView, UTM 9, Firewall Manager, Wireless, Central, Sophos for Virtual Environments, Central Device Encryption, Phish Threat, PureMessage, PureMessage for Microsoft Exchange, Web Appliance, Email Appliance, SafeGuard Enterprise, SafeGuard LAN Crypt, Enterprise Console and Endpoint Security and Control, Server Protection.

Retirement is when all urgent software fixes, protection updates and support will end. The date shown is the last date for support.

Steps to create the required certificate bundle to allow Guest VM migration on Sophos Enterprise Console managed Security VMs

This article covers a list of error codes returned by Sophos Central when applying an activation code.

SafeGuard Device Encryption upgrade fails with 'Volume Based Encryption must not be installed if a volume is already encrypted with BitLocker! Error: 25206'

Sophos SafeGuard BitLocker Client using Trusted Platform Module (TPM) + PIN protector is unable to boot after the machines mainboard was replaced

SafeGuard Easy 7.0 release notes: New in Service Release SGE 7.0.1

SafeGuard: Significant delay when locking a Windows desktop - HOTFIX

SGN 8 Synchronized Encryption: Initial encryption dependencies

SafeGuard Enterprise: How to configure the tray icon and its balloon tip behaviour

SafeGuard File Encryption, SafeGuard BitLocker Client: Login to SafeGuard Credential Provider fails to unlock the User's keyring on Windows 10 (version 1709) when the machine is part of a Workgroup

Resolved - Advisory - Sophos Central: QR code image not displayed when creating a new Google or Sophos Authenticator MFA option

SafeGuard Enterprise: Recovery scenarios

Sophos Central Device Encryption: macOS High Sierra support

Disabling early TLS (TLS 1.0) on the IIS hosting the SafeGuard Enterprise Server will break Client/Server communication for SafeGuard Clients running on Windows 7 or Windows 8.0

Sophos XG Firewall / Cyberoam: Fragmentation issue with first ISAKMP packet with SonicWall VPN client

Advisory: Sophos Central Enterprise Dashboard - Enterprise Admins can't view Logs and Reports when launching into a Sub-Estate

Microsoft Azure: Application registration and setting permissions

Advisory: Sophos Central Maintenance on Saturday April 13th, 2019

An issue was identified with interface services between Salesforce.com (SFDC) and Central Partner Dashboard and had now been resolved.

Known Issues List for Sophos Products

Endpoint Security and Control: Previously supported platforms and operating systems

Sophos for Virtual Environments: How to create the required certificate package to allow Guest VM Migration for Enterprise Console managed Security VMs

Sophos Central: Activation code error messages