Sophos On Big Sur

Posted on  by admin
Sophos On Big Sur

Can users with macOS 11 and the new Apple M1 hardware run Sophos Mac Endpoint Protection with the Big Sur EAP?
Yes. M1 users with Big Sur need to follow three steps:

Sur
  1. Install Rosetta 2
  2. Join the Big Sur EAP
  3. Run Sophos using Rosetta 2

We strongly recommend that customers do not upgrade any macOS clients running Sophos SafeGuard to macOS 11 (Big Sur) at this point. Doing so may have undesirable effects including: Doing so may have undesirable effects including. Recovery Instructions: Your options. In the Application Control policy, applications are allowed by default. System administrators choose applications that they wish to block.

What is Rosetta 2?
Rosetta 2 is a commonly used tool that enables a Mac with Apple silicon to use apps built for a Mac with an Intel processor. For instructions on installation, please refer to https://support.apple.com/en-gb/HT211861

Will there be a performance difference when using Rosetta 2?
Native support using the full power and performance of the Apple hardware will always be faster than using Rosetta 2. For normal business users there should not be any discernable difference. For heavy users of disk or CPU (for example: video editing, heavy photoshop usage, compiling) they will notice a difference in performance.

When is macOS 11 support coming?
The goal is to have macOS 11 support available to all customers by early March 2021. This includes support for both Sophos Central and Sophos Enterprise Console (SEC) managed devices. Brand new customers will have support from mid-February 2021. We will be upgrading all existing customers in stages, between mid-February and early March as per our normal release process.

Will Apple M1 Hardware be supported when we release Big Sur support?
Yes and this support will come in two stages. Stage 1 will be using Rosetta 2 and Stage 2 will be native support.

When will M1 processors be natively supported?
An early access program for native Apple M1 processor support will begin in early April. Planned GA is before the end of CYQ2. Native support means that Rosetta 2 is no longer required for emulation.

Will customers need to take any action when we support macOS 11 or the Apple M1 hardware?
When we release GA support for macOS 11 we will move all EAP devices to recommended. Customers do not need to take any action. The same will be true when we GA native support for the Apple M1 hardware. All devices that were running using Rosetta 2 will automatically use the native implementation.

Key links

Version 10.0.1

Important

You must review the information in knowledge base article KB-000039014 as it contains important information about this release.

Notes

The notification 'Full disk access required' that asks the user to grant Sophos processes full disk access may be re-triggered.

The threat detection engine version is 3.79.0.

Sur

Resolved issues

Resolved issues for this release.
Issue IDDescription
MACEP-5389Resolved an issue with tabs opening slowly in Google Chrome.

Version 10.0.0

New Features

Big

Sophos On Big Sur Mac

This release supports the EDR 3 capabilities in Sophos Central (to be rolled out for Macs by September). Live Discover allows admins to use osquery to search the device data across their estate to answer almost any question they can think of. Live Response allows admins to start an interactive session to a remote device.

This version supports macOS 10.13 and later.

Updated Components

The threat detection engine version is 3.79.0.

Resolved issues

Resolved issues for this release.
Issue IDDescription
MACEP-4232Improved battery life when performing on-demand scans.
MACEP-5178Resolved an issue when connecting devices lacking vendor, product or serial information.

Version 9.9.8

Resolved issues

Resolved issues for this release.
Issue IDDescription
MACEP-4973Resolved blank captive portal.

Version 9.9.6

This release contains performance improvements.

Resolved issues

Resolved issues for this release.
Issue IDDescription
MACEP-4600Improved memory usage when Threat Case creation is enabled.
MACEP-4602Resolved an issue with modified permissions on the man8 directory when using disk encryption.
MACEP-4493Resolved an intermittent failure where web pages may fail to load.
MACEP-4606Improved support for macOS 10.15 Catalina when using MDM profiles.

Version 9.9.5

New features

  • This release contains improved support for macOS 10.15 Catalina.
  • This release contains stability improvements.

Resolved issues

Resolved issues for this release.
Issue IDDescription
MACEP-4456Users can now copy paths from the Events panel.

Version 9.9.4

New features

Sophos On Big Sur
  • This release contains support for macOS 10.15 Catalina.
  • This release contains security and performance improvements.

Updated components

Sophos Big Sure

The threat detection engine version is 3.77.1.

Resolved issues

Resolved issues for this release.
Issue IDDescription
MACEP-4414Resolved an intermittent issue on macOS 10.14 Mojave where the Captive Network Assistant page could fail to load.
MACEP-4410Addressed CVE-2020-10947.