2024.45
Released on November 11, 2024
New features and enhancements
Intercept X for Mobile enrollment
You can enroll Intercept X for Mobile with Sophos Mobile using the same QR code
for all your Android devices, iPhones, and iPads.
Because the QR code doesn't contain information about a Sophos Mobile user,
devices enrolled with it don't have a user assigned. You can assign a user after enrollment.
See Enroll Intercept X for Mobile with a static QR code.
"Allow managing Google accounts" Android restriction
In Android Enterprise device policies, the Allow managing Google accounts restriction is only available
when you turn on Allow managing accounts.
When Allow managing accounts is turned off, this also affects Google accounts.
CSV injection prevention
We enhanced the CSV export from Sophos Mobile to mitigate security risks when opening exported files
in spreadsheet applications that support active content.
Input limitations
For performance reasons, the following input fields have a limit of 5,000 entries and 130,000 characters:
- The Allowed domains and Blocked domains fields in the Web Filtering configuration of
Mobile Threat Defense policies for Android and iOS, and Chrome Security policies.
- The Allowed URLs and Blocked URLs fields in the Web content filter configuration of iOS device policies.
- The Email domains and Web domains fields in the Managed domains configuration of iOS device policies,
macOS device policies, and macOS user policies.
- The Domains in Safari, Domains in Calendar, Domains in Contacts, and Domains in Mail fields
in the Per app VPN configuration of iOS device policies and iOS user policies.
Apple User Enrollment with the "Add device" assistant
We adjusted the version information in the Add device assistant for profile-based Apple User Enrollment.
Profile-based Apple User Enrollment requires iOS 17, iPadOS 17, or earlier.
Windows MSI apps
We improved the validation of installation options you enter for Windows MSI links.
Windows Mobile support
Although Windows Mobile support ended on December 31, 2019, some features were still available to customers
who enabled the Windows Mobile platform in Sophos Mobile before that date.
We'll soon remove the following features from Sophos Mobile:
- Add Windows Mobile devices, apps, and policies.
- Enroll Windows Mobile devices in Sophos Central Self Service Portal.
Resolved issues
Resolved issues for this release.
Issue ID |
Component |
Description |
SMCSRV-14959 |
Sophos Mobile |
Fixed an issue where the confirmation dialog was empty when unassigning an Apple configuration policy from devices. |
2024.36
Released on September 9, 2024
New iOS restrictions
We added the following restrictions to iOS device policies:
- Allow app installation from a website: Users can install apps from a website.
- Allow iPhone mirroring on Macs: Users can use iPhone Mirroring on a Mac to control their device.
- Allow video conferencing remote control: In FaceTime calls, users can allow another user to control their device via SharePlay Remote Control.
- Allow Live Voicemail: If you clear the checkbox, Live Voicemail is unavailable.
- Preserve eSIM on erase: The eSIM is preserved when the device is erased with the Erase All Content and Settings action or when an incorrect password is entered too many times.
- Allow eSIM transfer to another device: Users can transfer their eSIM to another device.
- Allow automatic dimming: If you clear the checkbox, the automatic dimming of iPads with OLED displays is turned off.
- Allow Genmoji: Users can use the AI-powered Genmoji feature to create custom emojis by typing a description.
- Allow Image Wand: Users can use the AI-powered Image Wand feature to create images from sketches and text in their Notes app.
- Allow Image Playground: Users can use the AI-powered Image Playground feature to create images.
- Allow Writing Tools: Users can use the AI-powered Writing Tools feature to create, proofread, rewrite, or summarize text.
- Allow output in user’s handwriting: Users can use Apple Intelligence to create content in their own handwriting.
Read more
New Android restrictions
We added the following restriction to Android Enterprise device policies and work profile policies:
- Allow sharing of managed Wi-Fi connections: If the checkbox is cleared, users can’t share Wi-Fi connections configured by Sophos Mobile.
Read more
Account-driven Apple User Enrollment
You can now use account-driven Apple User Enrollment to enroll iPhones and iPads owned by your users.
Account-driven Apple User Enrollment is more streamlined than the old profile-based Apple User Enrollment
because the workflow is built into the device’s Settings app.
Account-driven Apple User Enrollment is available for iOS and iPadOS 15 and later.
Profile-based Apple User Enrollment is available for iOS and iPadOS 17 and earlier.
Read more
Resolved issues
There are no resolved issues included in this release.
2024.30
Released on August 5, 2024
New features and enhancements
Sophos Chrome Security
We released a new version of Sophos Chrome Security, our Sophos Mobile client on Chromebooks.
This version, 2.0.2218, requires ChromeOS 110 or later, which has been available since January 2023.
Windows Home support
Microsoft has removed Windows Home from its list of Windows editions that support
device management through Mobile Device Management (MDM) solutions, such as Sophos Mobile.
To manage a Windows computer with Sophos Mobile, Windows Enterprise, Education, or Pro must be installed.
For details on supported versions, see the Requirements tab.
Resolved issues
There are no resolved issues included in this release.
2024.24
Released on June 17, 2024
New features and enhancements
Android password restrictions
With Android 12, Google has simplified the configuration of password complexity requirements to unlock the display.
The Password policies - Device configuration of Android Enterprise work profile policies now has a
Minimum password complexity list that lets you choose from three levels, Low, Medium, and High,
each with fixed complexity rules.
Read more
Find devices
When finding devices is disabled in the Sophos Mobile privacy settings, the Find device action is disabled instead of
removed and shows a tooltip with information about how to enable it.
Improved user experience
The Install app button on the Installed apps tab of the Show device page is highlighted to improve its visibility.
Resolved issues
Resolved issues for this release.
Issue ID |
Component |
Description |
SMCSRV-14720 |
Sophos Mobile |
Fixed a layout issue where the binding information on the Android Enterprise tab on the Google setup page wasn't
correctly aligned for administrators with the Read-only role. |
SMCSRV-14579 |
Sophos Mobile |
Fixed an issue where the Sophos Setup page wasn't available for administrators with the Read-only role. |
SMCSRV-14578 |
Sophos Mobile |
Fixed an issue where the Apple Setup page wasn't available for administrators with the Read-only role. |
2023.40
Released on October 23, 2023
New features and enhancements
Android Wi-Fi configuration
We added the following settings to the Wi-Fi configuration of Android policies:
- Domain suffix match
- Subject alternative name match
On Android 11 and later with security updates released after April 2023, these settings are required for Wi-Fi
connections that use the Extensible Authentication Protocol (EAP).
For details on using these settings, see Wi-Fi configuration (Android Enterprise device policy) and Wi-Fi configuration (Android Enterprise work profile policy).
ChromeOS synchronization interval
We removed the setting to configure the synchronization interval of the Sophos Chrome Security extension on ChromeOS devices.
ChromeOS devices use a fixed synchronization interval of 24 hours. For details, see Device synchronization.
User search in assistants
When you search for a user in the Add device, Assign user to device, or Invite users to VPP assistant,
the user is automatically selected when there's only one match.
Resolved issues
Resolved issues for this release.
Issue ID |
Component |
Description |
SMCSRV-14299 |
Sophos Mobile |
Fixed an issue where the Select all versions and Clear all versions actions of the extended device filter stopped working. |
SMCSRV-14328 |
Sophos Mobile |
Fixed an issue with some lists in dark mode where an entry wasn't highlighted when hovering over it. |
2023.16
Released on April 24, 2023
New features and enhancements
Audit Log
We improved device deletion entries in the Sophos Central Audit Log to include the name of the account that did the deletion.
Compliance policies
We renamed the Maximum interval between synchronizations compliance rules for the different device platforms to include
the type of synchronization the rule refers to.
For example, the Chromebook rule Maximum interval between synchronizations is now
Maximum interval between Sophos Chrome Security synchronizations.
Web Filtering
The Web Filtering configuration page for iOS now has a note stating that web traffic from apps is also filtered and
that you must not block domains any app depends on.
Supported software
We removed support for the following devices and mail servers:
- Android 7.0 and 7.1.
- Version 2004 (May 2020 Update) and earlier of Windows 10 Enterprise, Windows 10 Education, Windows 10 Pro, and Windows 10 Home.
- Exchange Server 2010 and 2013.