Deploying Sophos Endpoint per macOS profiles

[BCPeteo]

How are people deploying Sopho's endpoint per macOS profiles?

Are you creating smart groups for each OS and then assigning them to Sopho's endpoint profile for that OS? What happens when a user upgrades to another OS, do they get popups when old profile removes but does not have the new profile yet?

[JL85]

I have  Sophos Intercept X agent installed on all Mac OS (current support 12.13.14) we using the profiles that including in Installer package to make sure all extensions in function

You just need to create a Smart Group for specific version then and apply the configuration profile corresponding with MAC Os version

[BCPeteo]

What happens when the user updates the OS? If you are using a smart group per OS for each profile I would assume the profile is removed and then a new one automatically applied when Jamf gets updated OS information. In-between the time the old OS profile is removed and new one applies does the user get popups from Sophos saying an extension needs to be approved?