Sophos (10.3.1 & 10.3.2) on MacOS 12 Monterey (12.1 & 12.2) beachball post login

[hicksmat]

Hi there

Anyone else experiencing this issue? MacOS 12 running Sophos (latest versions to date) - post login getting the beachball and a machine locked up (possibly maxxed out in terms of CPU)?

some threads I found on Sophos themselves:

https://community.sophos.com/intercept-x-endpoint/f/discussions/131494/sophos-endpoint-intercept-x-m...

https://community.sophos.com/intercept-x-endpoint/f/discussions/130929/macos-slowdowns-with-eap-in-m...

Turning off some of the Sophos settings, or disabling/removing Sophos obviously works but I wondered if anyone else had anything better/different?

thanks

Matt.

[mickl089]

I also had this behavior, mainly with Monterey 12.0.1 and Sophos 10.3.1 - meanwhile the problem is contained. But unfortunately it happened again yesterday on a device...

Have you created config profiles for Sophos or are the permissions set manually?

[hicksmat]

the sophos admin console is where settings are done, so they apply to all our devices, windows or Mac. i found that if you login to the sophos agent with the sophos admin credentials and turn off:

real time scanning: internet

runtime protection: malicious traffic detection and ransomeware detection

then we get no beachball

obviously, we could do with a fix that means we don't have to turn those settings off

[MrRoboto]

Sophos + Mac has been a struggle since Catalina. Waiting for new OS support for months after release is not an option or good security posture. Time to switch to a different solution.