These are the release notes for Sophos Core Agent for Windows 7 and later, managed by Sophos Central.
Some of the features mentioned in these release notes are only available if you have the appropriate license.
You may find that you can't yet download and use the latest version. This is because Sophos releases the software over a number of days, but publishes the release notes on the first day.
View the product documentation at Endpoint protection.
This version of the Core Agent includes all the changes and improvements included in version 2.19.3, which was a limited release for ARM users. For more information see "Version: 2.19.3".
It also contains some minor improvements and updates.
Sophos Management Communication System updated to version 4.14.203.0.
This release requires a restart.
Sophos Management Communication System updated to version 4.14.203.0.
Threat Detection Engine updated to version 3.82.1.
This version of the Core Agent supports Windows 10 on ARM.
Sophos Antimalware Scan Interface Protection updated to version 1.7.79.
Sophos AutoUpdate updated to version 6.9.360.
Sophos Clean updated to version 3.9.8.10.
Sophos Diagnostic Utility updated to version 6.9.410.
Sophos Endpoint Defense updated to version 3.0.0.1639.
Sophos Endpoint UI updated to version 2.3.150.
Sophos File Scanner updated to version 1.8.24.0.
Sophos Health Service updated to version 2.7.28.0.
Sophos Live Query updated to version 3.3.0.267.
Sophos Live Terminal updated to version 1.3.23.0.
Sophos Management Communication System updated to version 4.14.52.0.
Sophos Network Threat Protection updated to version 1.14.38.0.
Sophos Self Help Tool updated to version 3.1.9.0.
Sophos Uninstaller updated to version 1.10.54.
Sophos Update Cache updated to version 1.7.0.40.
Sophos Endpoint Firewall Management version 1.2.0.17. This used to be included in Sophos Endpoint Advanced.
Machine Learning Engine version 1.7.4. This used to be included in Sophos Intercept X.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-30805 | Sophos Core Agent | Added proxy bypass support for SXL4 queries. |
| WINEP-30177 | Sophos Core Agent | Resolved an issue in which computers running Windows 7 stop unexpectedly. |
| WINEP-31478 | Sophos Health Service | Resolved an issue in which false "Failed to protect" messages were shown in Sophos Central. |
| WINEP-32419 | Sophos Endpoint Defense | Resolved an issue in which Sophos Endpoint Defense failed to install. |
This release requires a restart.
| Sophos Core Agent Windows 7 and later |
2.19.5 July |
2.19.3 July 2021 |
2.18.2 April |
2.15.4 January 2021 |
2.10.8 November 2020 |
2.10.7 September 2020 |
2.8.6 July 2020 |
2.8.5 July 2020 |
2.7.8 June 2020 |
2.7.7 May |
2.7.6 May |
2.6.0 February 2020 |
2.5.5 January 2020 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Sophos Antimalware Scan Interface Protection | 1.7.79 | 1.7.79 | 1.6.50.0 | 1.6.50.0 | 1.5.230 | 1.5.230 | 1.3.237 | 1.3.237 | 1.2.225 | 1.2.225 | 1.2.225 | 1.0.1503.0 | |
| Sophos AutoUpdate | 6.9.360 | 6.9.360 | 6.7.352.352 | 6.7.352.352 | 6.6.386 | 6.6.144 | 6.4.292 | 6.4.292 | 6.3.210 | 6.3.210 | 6.3.210 | 6.1.356 | 6.1.356 |
| Sophos Clean | 3.9.8.10 | 3.9.8.10 | 3.9.4.1 | 3.9.4.1 | 3.8.10.1 | 3.8.10.1 | 3.8.9.11 | 3.8.9.11 | 3.8.9.11 | 3.8.9.11 | 3.8.9.11 | 3.8.7.124 | 3.8.7.124 |
| Sophos Diagnostic Utility | 6.9.410 | 6.9.410 | 6.8.296 | 6.7.306 | 6.5.238 | 6.5.238 | 6.4.275 | 6.4.275 | 6.3.224 | 6.3.224 | 6.3.224 | 6.2.69 | |
| Sophos Endpoint Defense | 3.0.0.1639 | 3.0.0.1639 | 2.2.6.735 | 2.2.6.735 | 2.2.5.755 | 2.2.5.648 | 2.2.3.404 | 2.2.3.399 | 2.2.0.3440 | 2.2.0.3440 | 2.2.2.669 | 2.2.0.3440 | 2.2.0.3365 |
| Sophos Endpoint UI | 2.3.150 | 2.3.150 | 2.2.6 | 2.1.44 | 2.0.423 | 2.0.423 | 2.0.367 | 2.0.367 | 2.0.367 | 2.0.367 | 2.0.367 | 1.7.957 | 1.7.631.0 |
| Sophos File Scanner | 1.8.24.0 | 1.8.24.0 | 1.7.952 | 1.7.952 | 1.7.721 | 1.7.721 | 1.7.442 | 1.7.442 | 1.7.417 | 1.7.417 | 1.7.417 | 1.6.540 | 1.6.540 |
| Sophos Health Service | 2.7.28.0 | 2.7.28.0 | 2.6.2 | 2.5.153 | 2.4.7 | 2.4.7 | 2.4.7 | 2.4.7 | 2.4.7 | 2.4.7 | 2.4.7 | 2.3.12 | 2.3.12 |
| Sophos Live Query | 3.3.0.267 | 3.3.0.267 | 3.2.1.206 | 3.1.0.181 | 3.0.0.398 | 3.0.0.398 | 2.3.0.1 | 2.3.0.1 | 2.2.0.469 | 2.2.0.258 | 2.2.0.258 | 2.0.1.316 | 1.0.2.23 |
| Sophos Live Terminal | 1.3.23.0 | 1.3.23.0 | 1.2.131 | 1.2.131 | 1.2.4 | 1.2.4 | 1.1.10 | 1.1.10 | 1.0.267 | 1.0.267 | 1.0.267 | ||
| Sophos Management Communication System | 4.14.203.0 | 4.14.52.0 | 4.13.16.0 | 4.13.16.0 | 4.12.686 | 4.12.686 | 4.12.393 | 4.12.393 | 4.12.325 | 4.12.325 | 4.12.325 | 4.12.179 | 4.11.127 |
| Sophos Network Threat Protection Malicious Traffic Detection |
1.14.38.0 | 1.14.38.0 | 1.11.194 | 1.11.194 | 1.10.1051 | 1.10.1051 | 1.9.2373 | 1.9.2373 | 1.9.2373 | 1.9.2373 | 1.9.2373 | 1.9.2235 | 1.9.2235 |
| Sophos Self Help Tool | 3.1.9.0 | 3.1.9.0 | 3.0.217.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | |
| Sophos Uninstaller | 1.10.54 | 1.10.54 | 1.10.54 | 1.10.54 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.8.1.1 | 1.8.1.1 |
| Threat Detection Engine | 3.80.1 | 3.80.1 | 3.80.1 | 3.80.1 | 3.79.0 | 3.79.0 | 3.79.0 | 3.79.0 | 3.78.7 | 3.78.7 | 3.78.7 | 3.78.5 | 3.77.1 |
| Sophos Update Cache | 1.7.0.40 | 1.7.0.40 | 1.7.0.40 | 1.7.0.40 | |||||||||
| Sophos Endpoint Firewall Management | 1.2.0.17 | 1.2.0.17 | |||||||||||
| Machine Learning Engine | 1.7.4 | 1.7.4 |
For information about the changes to Sophos Endpoint Advanced, see the Sophos Endpoint Advanced release notes.
For information about the changes to Sophos Intercept X, see the Sophos Intercept X release notes.
For improvements and new features in the Sophos Central console, see What's new in Sophos Central.
This version of the Core Agent supports the XDR Data Lake capabilities in Sophos Central.
Sophos Diagnostic Utility updated to version 6.8.296.
Sophos Endpoint UI updated to version 2.2.6.
Sophos Health Service updated to version 2.6.2.
Sophos Live Query updated to version 3.2.1.206.
Sophos Self Help Tool updated to version 3.0.236.0.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-30722 | Sophos Health Service | Resolved an issue with Sophos Health Service not reporting a correct status to Sophos Central when the endpoint was in Modern Standby mode. |
This release requires a restart.
Sophos Update Cache version 1.7.0.40.
Sophos Antimalware Scan Interface Protection updated to version 1.6.50.0.
Sophos AutoUpdate updated to version 6.7.352.352.
Sophos Clean updated to version 3.9.4.1.
Sophos Diagnostic Utility updated to version 6.7.306.
Sophos Endpoint Defense updated to version 2.2.6.735.
Sophos Endpoint UI updated to version 2.1.44.
Sophos File Scanner updated to version 1.7.952.
Sophos Health Service updated to version 2.5.153.
Sophos Live Query updated to version 3.1.0.181.
Sophos Live Terminal updated to version 1.2.131.
Sophos Management Communication System updated to version 4.13.16.0.
Sophos Network Threat Protection updated to version 1.11.194.
Sophos Self Help Tool updated to version 3.0.217.0.
Sophos Uninstaller updated to version 1.10.54.
Threat Detection Engine updated to version 3.80.1.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-23808 | Sophos Uninstaller | Resolved an issue with uninstall strings in the registry being quoted. |
| WINEP-28499 | Sophos UI | Resolved an issue with the UI not displaying certain products. |
| WINEP-28781 | Sophos Antimalware Scan Interface Protection | Resolved a rare issue with AMSI scanning causing performance issues on some computers. |
This release requires a restart.
Sophos AutoUpdate updated to version 6.6.386.
Sophos Endpoint Defense updated to version 2.2.5.755.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-29930 | Sophos Endpoint Defense | Resolved a performance problem when reimaging USB drives. |
| WINEP-29915 | Sophos Endpoint Defense | Resolved an issue with some services failing to start after a restart. This occurred on devices using some incompatible third-party device drivers. |
| WINEP-29285 | Sophos Endpoint Defense | Resolved an issue on servers running Windows 2012 Server R2 stopping when event journals are turned on. |
This release requires a restart.
Sophos Antimalware Scan Interface Protection updated to version 1.5.230.
Sophos AutoUpdate updated to version 6.6.144.
Sophos Clean updated to version 3.8.10.1.
Sophos Diagnostic Utility updated to version 6.5.238.
Sophos Endpoint Defense updated to version 2.2.5.648.
Sophos File Scanner updated to version 1.7.721.
Sophos Live Query updated to version 3.0.0.398.
Sophos Live Terminal updated to version 1.2.4.
Sophos Management Communication System updated to version 4.12.686.
Sophos Network Threat Protection updated to version 1.10.1051.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-27936 | Sophos Antimalware Scan Interface Protection | Resolved an issue in which AMSI was stopping \\cdg-store-app\RetailPro9\RPro9.exe /logpluginload from loading. |
| WINEP-27257 | Sophos Antimalware Scan Interface Protection | Resolved an issue in which AMSI caused the Altiris Deployment Agent to hang. |
Sophos Antimalware Scan Interface Protection updated to version 1.3.237.
Sophos AutoUpdate updated to version 6.4.292.
Sophos Diagnostic Utility updated to version 6.4.275.
Sophos Endpoint Defense updated to version 2.2.3.404.
Sophos File Scanner updated to version 1.7.442.
Sophos Live Query updated to version 2.3.0.1.
Sophos Live Terminal updated to version 1.1.10.
Sophos Management Communication System updated to version 4.12.393.
Threat Detection Engine updated to 3.79.0.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-27396 | Sophos Management Communication System | Resolved an issue with using Live Discover to query endpoints that communicate with Sophos Central through an authenticated proxy. |
Sophos Antimalware Scan Interface Protection updated to version 1.3.237.
Sophos AutoUpdate updated to version 6.4.292.
Sophos Diagnostic Utility updated to version 6.4.275.
Sophos Endpoint Defense updated to version 2.2.3.399.
Sophos File Scanner updated to version 1.7.442.
Sophos Live Query updated to version 2.3.0.1.
Sophos Live Terminal updated to version 1.1.10.
Sophos Management Communication System updated to version 4.12.393.
Threat Detection Engine updated to 3.79.0.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-27396 | Sophos Management Communication System | Resolved an issue with using Live Discover to query endpoints that communicate with Sophos Central through an authenticated proxy. |
This version of the Core Agent supports the EDR 3 capabilities in Sophos Central. Live Discover allows admins to use Osquery to search the device data across their estate to answer almost any question they can think of. Live Response allows admins to remotely connect to devices and get access to a command-line interface. This enables them to perform detailed investigations or to take prompt action to contain or remediate a threat.
Sophos Live Terminal 1.0.267, which is used for Live Response.
Sophos AutoUpdate updated to version 6.3.210.
Sophos Management Communication System updated to version 4.12.325.
Sophos Health Service updated to version 2.4.7.
Sophos Network Threat Protection updated to version 1.9.2373.
Sophos Endpoint UI updated to version 2.0.367.
Sophos Uninstaller updated to version 1.9.0.4.
Sophos Endpoint Defense updated to version 2.2.0.3440.
Sophos Clean updated to version 3.8.9.11.
Sophos File Scanner updated to version 1.7.417.
Threat Detection Engine updated to 3.78.7.
Sophos Live Query updated to version 2.2.0.469.
Sophos Diagnostic Utility updated to version 6.3.224.
Sophos Antimalware Scan Interface Protection updated to version 1.2.225.
This version of the Core Agent supports Sophos Antimalware Scan Interface (AMSI) Protection which integrates into applications for Windows 10 and Windows Server 2016 and allows for the most common malware scanning and protection techniques. Checks include whether scripts are safe to run, even if they're obfuscated or only generated at runtime. Similar checks can be applied for code that is loaded from sources other than the local disk before it is executed from memory.
This release includes the following new components:
Sophos Management Communication System updated to version 4.12.179.
Sophos Endpoint UI updated to version 1.7.957.
Sophos Endpoint Defense updated to version 2.2.0.3440.
Threat Detection Engine updated to 3.78.5.
Sophos Live Query updated to version 2.0.1.316.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-22224 | Sophos Endpoint | Resolved an issue with Synchronized Security in which endpoints missed their initial heartbeat configuration policy. |
Sophos Management Communication System updated to 4.11.127.
Sophos Network Threat Protection updated to 1.9.2235.
Sophos Clean updated to 3.8.7.124.
Sophos File Scanner updated to 1.6.540.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-21961 | Sophos Management Communication System | Resolved a delay in User ID information being sent to Sophos XG Firewall, which can lead to network delay. |
| WINEP-21961 | Sophos Management Communication System | Resolved a delay in User ID information being sent to Sophos XG Firewall, which can lead to network delay. |
This version of Sophos Endpoint is supported on Windows 7 and later client operating systems. For a full list of system requirements, see https://www.sophos.com/en-us/support/knowledgebase/121027.aspx.
It is now possible to automatically migrate a computer managed by Sophos Enterprise Console or Sophos Control Center to be managed by Sophos Central. Please see the Sophos Central Migration Tool Help for more details.
For known migration issues, see the issues for Sophos Central agent installer in Known issues and limitations.
Sophos Device Control does not block removable storage devices that are used as system drives, as this typically destabilizes the operating system.
This version of Sophos Central Server Core Agent is supported on Windows Server 2008 R2 and later operating systems. Versions of Windows targeted by Microsoft for non-business environments are not supported.
You can find technical support for Sophos products in any of these ways:
Copyright © 2021 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.
Sophos and Sophos Anti-Virus are registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.