Sophos Antivirus Is Not Running

You can see applications that you have allowed to run on your computers.

Sophos Anti-Virus cannot report to Sophos Enterprise Console (SEC) or receive new security policies. This is because it is using an SSL certificate that is incompatible with the SEC server. Sophos Anti-Virus should be reinstalled by the system administrator. This can happen in the following circumstances. 2 days ago  Sophos Anti-Virus for Mac Sophos Home Free (for Mac) by Neil J. Rubenking and Max Eddy Dec 10, 2020. I always advise running a full scan after installing any antivirus utility, to make sure. Running a scan using the Sophos Home main window The Scan Computer button performs a full system scan on Sophos Home free version, and a quick scan for Sophos Home premium version. Double-click on the Sophos Home shield on the system tray. Click on Scan computer button.

How Good Is Sophos Security

On the Settings > Allowed Applications page you can see applications that you have allowed to run on your endpoint computers.

The page shows where the application was originally detected (if applicable) and how it was allowed.

About allowed applications

Sophos Antivirus Is Not Running Back In

Our software detects threats that are previously unknown. However, it may sometimes identify an application as a threat, even though you know that it’s safe. When this happens, you can “allow” the application. This does as follows:

  • Prevents this detection from happening again.
  • Restores all copies that have been cleaned up (removed from computers).

Alternatively, you can allow an application in advance, so that it won't be detected when you install it for users.

Warning Think carefully before you allow applications because it reduces your protection.
Note If an option is locked global settings have been applied by your partner or Enterprise administrator. You can still stop detecting applications, exploits and ransomware by going to the events list.

Allow an application that's been detected

Only allow an application if you know it's safe. For help deciding, see How to investigate and resolve a potential False Positive or Incorrect Detection.

To allow an application that Sophos has detected and removed, do as follows.

Note that:

Sophos antivirus is active but on-access scanning is not running
  • This allows the application for all computers and users.
  • This allows the application to start, but we’ll still check it for threats, exploits and malicious behavior when it's running.
  1. Go to the Computers or Servers page, depending on where the application was detected.
  2. Find the computer where the detection happened and click on it to view its details.
  3. On the Events tab, find the detection event and click Details.
  4. In the Event details dialog, look under Allow this application.
  5. Select the method of allowing the application:
    • Certificate: This is recommended. It also allows other applications with the same certificate.
    • SHA-256: This allows this version of the application. However, if the application is updated, it could be detected again.
    • Path: This allows the application as long as it's installed in the path (location) shown. You can edit the path (now or later) and you can use variables if the application is installed in different locations on different computers.
  6. Click Allow.

Sophos Rating

Edit the path for an allowed application

You can change the path that you specified when you allowed an application.

  1. On the Allowed Applications page, find the application. The current path is shown in the details.
  2. Click the edit icon (the pen) on the far right of the page.
  3. In the Edit path dialog, enter the new path.
Sophos software

Sophos Antivirus Is Active But On-access Scanning Is Not Running

When you edit a path, details of the original detection (user, computer and path) are removed from the list.

Start detecting an application again

If you want Sophos to start detecting and removing an application again, you remove it from the Allowed Applications list.

Select the application and click Remove (in the upper right of the page).

Comments are closed.