These are the release notes for Sophos Core Agent for Windows 7 and later, managed by Sophos Central.
Some of the features mentioned in these release notes are only available if you have the appropriate license.
You may find that you cannot yet download and use the latest version. This is because Sophos releases the software over a number of days, but publishes the release notes on the first day.
Sophos AutoUpdate updated to version 6.6.386.
Sophos Endpoint Defense updated to version 2.2.5.755.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-29930 | Sophos Endpoint Defense | Resolved a performance problem when reimaging USB drives. |
| WINEP-29915 | Sophos Endpoint Defense | Resolved an issue with some services failing to start after a restart. This occurred on devices using some incompatible third-party device drivers. |
| WINEP-29285 | Sophos Endpoint Defense | Resolved an issue on servers running Windows 2012 Server R2 stopping when event journals are turned on. |
This release requires a restart.
| Sophos Core Agent Windows 7 and later |
2.10.8 November 2020 |
2.10.7 September 2020 |
2.8.6 July 2020 |
2.8.5 July 2020 |
2.7.8 June 2020 |
2.7.7 May |
2.7.6 May |
2.6.0 February 2020 |
2.5.5 January 2020 |
2.5.2 November 2019 |
2.4.1 September 2019 |
2.4.0 June 2019 |
2.3.0 April 2019 |
2.2.2 December 2018 |
2.2.1 November 2018 |
2.2.0 November 2018 |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Sophos Antimalware Scan Interface Protection | 1.5.230 | 1.5.230 | 1.3.237 | 1.3.237 | 1.2.225 | 1.2.225 | 1.2.225 | 1.0.1503.0 | ||||||||
| Sophos AutoUpdate | 6.6.386 | 6.6.144 | 6.4.292 | 6.4.292 | 6.3.210 | 6.3.210 | 6.3.210 | 6.1.356 | 6.1.356 | 6.1.356 | 6.0.547 | 6.0.547 | 6.0.547 | 5.13.51 | 5.13.51 | 5.13.51 |
| Sophos Clean | 3.8.10.1 | 3.8.10.1 | 3.8.9.11 | 3.8.9.11 | 3.8.9.11 | 3.8.9.11 | 3.8.9.11 | 3.8.7.124 | 3.8.7.124 | 3.8.6.1 | 3.8.6.1 | 3.8.6.1 | 3.8.6.1 | 3.8.6.1 | 3.8.6.1 | 3.8.6.1 |
| Sophos Diagnostic Utility | 6.5.238 | 6.5.238 | 6.4.275 | 6.4.275 | 6.3.224 | 6.3.224 | 6.3.224 | 6.2.69 | ||||||||
| Sophos Endpoint Defense | 2.2.5.755 | 2.2.5.648 | 2.2.3.404 | 2.2.3.399 | 2.2.0.3440 | 2.2.0.3440 | 2.2.2.669 | 2.2.0.3440 | 2.2.0.3365 | 2.2.0.3365 | 2.1.3.26 | 2.1.3.26 | 2.1.2.0 | 2.1.0.406 | 2.1.0.405 | 2.1.0.378 |
| Sophos Endpoint UI | 2.0.423 | 2.0.423 | 2.0.367 | 2.0.367 | 2.0.367 | 2.0.367 | 2.0.367 | 1.7.957 | 1.7.631.0 | 1.7.631.0 | 1.7.452.0 | 1.7.167 | 1.7.134 | 1.7.24 | 1.7.24 | 1.7.24 |
| Sophos File Scanner | 1.7.721 | 1.7.721 | 1.7.442 | 1.7.442 | 1.7.417 | 1.7.417 | 1.7.417 | 1.6.540 | 1.6.540 | 1.6.478 | 1.5.15.0 | 1.5.15.0 | 1.5.15.0 | 1.4.15.0 | 1.4.15.0 | 1.4.15.0 |
| Sophos Health Service | 2.4.7 | 2.4.7 | 2.4.7 | 2.4.7 | 2.4.7 | 2.4.7 | 2.4.7 | 2.3.12 | 2.3.12 | 2.3.12 | 2.1.0.33 | 2.1.0.33 | 2.1.0.33 | 2.1.0.33 | 2.1.0.33 | 2.1.0.33 |
| Sophos Live Query | 3.0.0.398 | 3.0.0.398 | 2.3.0.1 | 2.3.0.1 | 2.2.0.469 | 2.2.0.258 | 2.2.0.258 | 2.0.1.316 | 1.0.2.23 | 1.0.2.23 | 1.0.1.226 | |||||
| Sophos Live Terminal | 1.2.4 | 1.2.4 | 1.1.10 | 1.1.10 | 1.0.267 | 1.0.267 | 1.0.267 | |||||||||
| Sophos Management Communication System | 4.12.686 | 4.12.686 | 4.12.393 | 4.12.393 | 4.12.325 | 4.12.325 | 4.12.325 | 4.12.179 | 4.11.127 | 4.11.13 | 4.10.423 | 4.10.423 | 4.9.424 | 4.9.424 | 4.9.300 | 4.9.300 |
| Sophos Network Threat Protection Malicious Traffic Detection |
1.10.1051 | 1.10.1051 | 1.9.2373 | 1.9.2373 | 1.9.2373 | 1.9.2373 | 1.9.2373 | 1.9.2235 | 1.9.2235 | 1.9.1929 | 1.8.1555 | 1.8.1555 | 1.8.1555 | 1.8.59.0 | 1.7.620.0 | 1.7.529.0 |
| Sophos Self Help Tool | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.3.13.0 | 2.0.103 | 2.0.103 | 2.0.103 | 2.0.103 | 2.0.103 | 2.0.103 | 2.0.103 |
| Sophos Uninstaller | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.9.0.4 | 1.8.1.1 | 1.8.1.1 | 1.8.1.1 | 1.8.0.37 | 1.8.0.37 | 1.7.0.72 | 1.7.0.72 | 1.7.0.72 | 1.7.0.72 |
| Threat Detection Engine | 3.79.0 | 3.79.0 | 3.79.0 | 3.79.0 | 3.78.7 | 3.78.7 | 3.78.7 | 3.78.5 | 3.77.1 | 3.77.1 | 3.74.1 | 3.74.1 | 3.74.1 | 3.74.1 | 3.74.1 | 3.74.1 |
For information about the changes to Sophos Endpoint Advanced, see the Sophos Endpoint Advanced release notes.
For information about the changes to Sophos Intercept X, see the Sophos Intercept X release notes.
For improvements and new features in the Sophos Central console, see What's new in Sophos Central.
Sophos Antimalware Scan Interface Protection updated to version 1.5.230.
Sophos AutoUpdate updated to version 6.6.144.
Sophos Clean updated to version 3.8.10.1.
Sophos Diagnostic Utility updated to version 6.5.238.
Sophos Endpoint Defense updated to version 2.2.5.648.
Sophos File Scanner updated to version 1.7.721.
Sophos Live Query updated to version 3.0.0.398.
Sophos Live Terminal updated to version 1.2.4.
Sophos Management Communication System updated to version 4.12.686.
Sophos Network Threat Protection updated to version 1.10.1051.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-27936 | Sophos Antimalware Scan Interface Protection | Resolved an issue in which AMSI was stopping \\cdg-store-app\RetailPro9\RPro9.exe /logpluginload from loading. |
| WINEP-27257 | Sophos Antimalware Scan Interface Protection | Resolved an issue in which AMSI caused the Altiris Deployment Agent to hang. |
Sophos Antimalware Scan Interface Protection updated to version 1.3.237.
Sophos AutoUpdate updated to version 6.4.292.
Sophos Diagnostic Utility updated to version 6.4.275.
Sophos Endpoint Defense updated to version 2.2.3.404.
Sophos File Scanner updated to version 1.7.442.
Sophos Live Query updated to version 2.3.0.1.
Sophos Live Terminal updated to version 1.1.10.
Sophos Management Communication System updated to version 4.12.393.
Threat Detection Engine updated to 3.79.0.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-27396 | Sophos Management Communication System | Resolved an issue with using Live Discover to query endpoints that communicate with Sophos Central through an authenticated proxy. |
Sophos Antimalware Scan Interface Protection updated to version 1.3.237.
Sophos AutoUpdate updated to version 6.4.292.
Sophos Diagnostic Utility updated to version 6.4.275.
Sophos Endpoint Defense updated to version 2.2.3.399.
Sophos File Scanner updated to version 1.7.442.
Sophos Live Query updated to version 2.3.0.1.
Sophos Live Terminal updated to version 1.1.10.
Sophos Management Communication System updated to version 4.12.393.
Threat Detection Engine updated to 3.79.0.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-27396 | Sophos Management Communication System | Resolved an issue with using Live Discover to query endpoints that communicate with Sophos Central through an authenticated proxy. |
This version of the Core Agent supports the EDR 3 capabilities in Sophos Central. Live Discover allows admins to use Osquery to search the device data across their estate to answer almost any question they can think of. Live Response allows admins to remotely connect to devices and get access to a command-line interface. This enables them to perform detailed investigations or to take prompt action to contain or remediate a threat.
Sophos Live Terminal 1.0.267, which is used for Live Response.
Sophos AutoUpdate updated to version 6.3.210.
Sophos Management Communication System updated to version 4.12.325.
Sophos Health Service updated to version 2.4.7.
Sophos Network Threat Protection updated to version 1.9.2373.
Sophos Endpoint UI updated to version 2.0.367.
Sophos Uninstaller updated to version 1.9.0.4.
Sophos Endpoint Defense updated to version 2.2.0.3440.
Sophos Clean updated to version 3.8.9.11.
Sophos File Scanner updated to version 1.7.417.
Threat Detection Engine updated to 3.78.7.
Sophos Live Query updated to version 2.2.0.469.
Sophos Diagnostic Utility updated to version 6.3.224.
Sophos Antimalware Scan Interface Protection updated to version 1.2.225.
This version of the Core Agent supports Sophos Antimalware Scan Interface (AMSI) Protection which integrates into applications for Windows 10 and Windows Server 2016 and allows for the most common malware scanning and protection techniques. Checks include whether scripts are safe to run, even if they're obfuscated or only generated at runtime. Similar checks can be applied for code that is loaded from sources other than the local disk before it is executed from memory.
This release includes the following new components:
Sophos Management Communication System updated to version 4.12.179.
Sophos Endpoint UI updated to version 1.7.957.
Sophos Endpoint Defense updated to version 2.2.0.3440.
Threat Detection Engine updated to 3.78.5.
Sophos Live Query updated to version 2.0.1.316.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-22224 | Sophos Endpoint | Resolved an issue with Synchronized Security in which endpoints missed their initial heartbeat configuration policy. |
Sophos Management Communication System updated to 4.11.127.
Sophos Network Threat Protection updated to 1.9.2235.
Sophos Clean updated to 3.8.7.124.
Sophos File Scanner updated to 1.6.540.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-21961 | Sophos Management Communication System | Resolved a delay in User ID information being sent to Sophos XG Firewall, which can lead to network delay. |
| WINEP-21961 | Sophos Management Communication System | Resolved a delay in User ID information being sent to Sophos XG Firewall, which can lead to network delay. |
This version of the Core Agent updates the Threat Case and Forensic Snapshot upload features that are available to customers with an Intercept X license:
Sophos AutoUpdate updated to version 6.1.356.
Sophos Management Communication System updated to 4.11.13.
Sophos Health Service updated to 2.3.12.
Sophos Network Threat Protection updated to 1.9.1929.
Sophos Endpoint UI updated to 1.7.631.0.
Sophos Uninstaller updated to 1.8.1.1.
Sophos Endpoint Defense updated to 2.2.0.3365.
Sophos File Scanner updated to 1.6.478.
Threat Detection Engine updated to 3.77.1.
Sophos Live Query updated to 1.0.2.23.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-12344 | Sophos Endpoint | Resolved an issue with Sophos Endpoint using excessive CPU resource. |
| WINEP-14723, WINEP-14728, WINEP-14729 | Sophos Endpoint | Increased robustness of installation by retrying installation in cases where another MSI installer is already running. |
| WINEP-19408 | Sophos Endpoint | Fixed an issue in which the Management Communications System configuration can get corrupted when the computer shuts down unexpectedly. |
| WINEP-20408 | Sophos Endpoint | Resolved an issue that prevents files in WebDAV folders from being successfully scanned. |
| WINEP-18710 | Sophos Endpoint | Resolved an issue that prevents Sophos Health Service from starting if the events database is corrupted. |
| WINEP-19248 | Sophos Endpoint | Resolved an issue in which Sophos Heartbeat sends an incorrect health status to the firewall. |
Sophos Live Query version 1.0.1.226, which is used for Managed Threat Response.
Sophos Endpoint UI updated to version 1.7.452.0.
Sophos Management Communications System updated to version 4.10.423.
Sophos Uninstaller updated to version 1.8.0.37.
Sophos Endpoint UI updated to version 1.7.167.
Sophos Endpoint Defense updated to version 2.1.3.26.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-20135 | Sophos Endpoint | Resolved an issue on Windows 10 1903 with SSPService.exe using excessive system memory. |
| WINEP-20046 | Sophos Endpoint | Resolved an issue migrating endpoints from Sophos Enterprise Console to Sophos Central. |
| WINEP-19868 | Sophos Endpoint | Improved disk IO performance of SSPEdr.exe process. |
| WINEP-19720 | Sophos Endpoint | Resolved an issue with Windows stopping that could occur when installing Veeam software on Cluster computers. |
| WINEP-18113 | Sophos Endpoint | Resolved an issue with Windows 7 users being unable to authenticate to XG Firewalls using single sign-on. |
This version of the Core Agent supports new Endpoint Detection and Response features. Customers with an Intercept X Advanced with EDR license will get these enhancements:
Sophos AutoUpdate updated to version 6.0.457.
Sophos Network Threat Protection updated to version 1.8.1555.
Sophos Endpoint UI updated to version 1.7.134.
Sophos Endpoint Defense updated to version 2.1.2.0.
Sophos File Scanner updated to 1.5.15.0.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-15020 | Sophos AutoUpdate | Resolved an issue with AutoUpdate not enabling TLS 1.1 or 1.2 on Windows 7 and Windows 8. |
Sophos Management Communications System updated to version 4.9.424.
Sophos Network Threat Protection updated to version 1.8.59.0.
Sophos Endpoint Defense updated to version 2.1.0.406.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-16959 | Sophos Network Threat Protection | Resolved an issue with Connection Tracking affecting network connectivity. |
| WINEP-16965 | Sophos Endpoint Defense | Resolved an installation failure on Windows 10 RS5 where the installer failed to
copy SophosEL.sys into the ELAM driver backup path. |
| WINEP-16986 | Management Communications System | Resolved an issue uploading Endpoint Detection and Response (EDR) data through a message relay. |
Sophos Network Threat Protection updated to version 1.7.620.0.
Sophos Endpoint Defense updated to version 2.1.0.405.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-16853 | Sophos Endpoint Defense | Resolved an issue with submitting files containing multi-byte characters to SophosLabs Threat Intelligence. |
| WINEP-16752 | Sophos Network Threat Protection | Resolved an issue with isolation exclusions not always being removed correctly. |
This version of the Core Agent supports new Endpoint Detection and Response capabilities. Customers entitled to the new EDR features will get access to:
Sophos Management Communications System updated to version 4.9.300.
Sophos Network Threat Protection updated to version 1.7.529.0.
Sophos Uninstaller updated to version 1.7.0.72.
Sophos Health updated to version 2.1.0.33.
Sophos Endpoint UI updated to version 1.7.24.
Sophos Endpoint Defense updated to version 2.1.0.378.
Sophos Clean updated to version 3.8.6.1.
Sophos File Scanner updated to version 1.4.15.0.
Threat Detection Engine updated to version 3.74.1.
| Issue ID | Component | Description |
|---|---|---|
| WINEP-9893 | Sophos Endpoint UI | Changed PUA Desktop Message wording. |
This version of Sophos Endpoint is supported on Windows 7 and later client operating systems. For a full list of system requirements, see https://www.sophos.com/en-us/support/knowledgebase/121027.aspx.
It is now possible to automatically migrate a computer managed by Sophos Enterprise Console or Sophos Control Center to be managed by Sophos Central. Please see the Sophos Central Migration Tool Help for more details.
For known migration issues, see the issues for Sophos Central agent installer in Known issues and limitations.
Sophos Device Control does not block removable storage devices that are used as system drives, as this typically destabilizes the operating system.
You can find technical support for Sophos products in any of these ways:
Copyright © 2020 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.
Sophos and Sophos Anti-Virus are registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.