These are the release notes for Sophos Central Server Core Agent for Windows Server 2008 R2 and later operating systems.
Some of the features mentioned in these release notes are only available if you have the appropriate license.
You may find that you cannot yet download and use the latest version. This is because Sophos releases the software over a number of days, but publishes the release notes on the first day.
Sophos AutoUpdate updated to version 6.6.386.
Sophos Endpoint Defense updated to version 184.108.40.2065.
|WINEP-29930||Sophos Endpoint Defense||Resolved a performance problem when reimaging USB drives.|
|WINEP-29915||Sophos Endpoint Defense||Resolved an issue with some services failing to start after a restart. This occurred on devices using some incompatible third-party device drivers.|
|WINEP-29285||Sophos Endpoint Defense||Resolved an issue on servers running Windows 2012 Server R2 stopping when event journals are turned on.|
This release requires a restart.
|Sophos Central Server Core Agent
Windows Server 2008 R2 and later
|Sophos Antimalware Scan Interface Protection||1.5.23||1.5.23||1.3.237||1.2.225||1.2.225||1.2.225||1.0.1503.0|
|Sophos Diagnostic Utility||6.5.238||6.5.238||6.4.275||6.3.224||6.3.224||6.3.224||6.2.69|
|Sophos Endpoint Defense||220.127.116.115||18.104.22.1688||22.214.171.1244||126.96.36.19940||188.8.131.5240||184.108.40.2069||220.127.116.1105||18.104.22.16805||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.1246|
|Sophos File Integrity Monitoring||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206|
|Sophos File Scanner||1.7.721||1.7.721||1.7.442||1.7.417||1.7.417||1.7.417||1.6.540||1.6.540||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||1.4.15|
|Sophos Health Service||2.4.7||2.4.7||2.4.7||2.4.7||2.4.7||2.4.7||2.3.12||2.3.12||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11|
|Sophos Live Query||18.104.22.1688||22.214.171.1248||126.96.36.199||188.8.131.529||184.108.40.2068||220.127.116.118||18.104.22.1686||22.214.171.124||126.96.36.199|
|Sophos Live Terminal||1.2.4||1.2.4||1.1.10||1.0.267||1.0.267||1.0.267|
|Sophos Management Communication System||4.12.686||4.12.686||4.12.393||4.12.325||4.12.325||4.12.325||4.12.179||4.11.127||4.10.423||4.10.423||4.10.423||4.10.423||4.9.462.0||4.9.462.0||4.9.462.0|
|Sophos Message Relay||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11|
|Sophos Network Threat Protection||1.10.1051||1.10.1051||1.9.2373||1.9.2373||1.9.2373||1.9.2373||1.9.2235||1.9.2235||1.8.1555||1.8.1555||1.8.1555||1.8.1555||1.8.1555||1.8.1555||18.104.22.168|
|Sophos Self Help Tool||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52|
|Sophos Server Lockdown||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2||7.1.2|
|Sophos Standalone Engine||1.6.11||1.6.11||1.5.3||1.5.3||1.5.3||1.5.3||1.5.3||1.2.23||1.2.23||1.2.23||1.2.23||1.2.23||1.2.23||1.2.23|
|Sophos Update Cache||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168|
|Threat Detection Engine||3.79.0||3.79.0||3.79.0||3.78.7||3.78.7||3.78.7||3.78.5||3.77.1||22.214.171.124||126.96.36.199||188.8.131.52||184.108.40.206||220.127.116.11||18.104.22.168||22.214.171.124|
For information about the changes to Sophos Central Server Anti-Virus, see the Sophos Central Server Anti-Virus release notes.
For information about the changes to Intercept X Advanced for Server with EDR, see the Intercept X Advanced for Server with EDR release notes.
For improvements and new features in Sophos Central, see What's new in Sophos Central.
Occasionally an update requires a restart. Sophos never forces this restart and there is no impact on protection or threat detection updates during the period before the restart.
We recommend that you schedule a restart during your next maintenance window to ensure that you are running the latest version.
Sophos Antimalware Scan Interface Protection updated to version 1.5.230.
Sophos AutoUpdate updated to version 6.6.144.
Sophos Clean updated to version 126.96.36.199.
Sophos Diagnostic Utility updated to version 6.5.238.
Sophos Endpoint Defense updated to version 188.8.131.528.
Sophos File Scanner updated to version 1.7.721.
Sophos Live Query updated to version 184.108.40.2068.
Sophos Live Terminal updated to version 1.2.4.
Sophos Management Communication System updated to version 4.12.686.
Sophos Network Threat Protection updated to version 1.10.1051.
|WINEP-27936||Sophos Antimalware Scan Interface Protection||Resolved an issue in which AMSI was stopping \\cdg-store-app\RetailPro9\RPro9.exe /logpluginload from loading.|
|WINEP-27257||Sophos Antimalware Scan Interface Protection||Resolved an issue in which AMSI caused the Altiris Deployment Agent to hang.|
Sophos Antimalware Scan Interface Protection updated to version 1.3.237.
Sophos AutoUpdate updated to version 6.4.292.
Sophos Diagnostic Utility updated to version 6.4.275.
Sophos Endpoint Defense updated to version 220.127.116.114.
Sophos File Scanner updated to version 1.7.442.
Sophos Live Query updated to version 18.104.22.168.
Sophos Live Terminal updated to version 1.1.10.
Sophos Management Communication System updated to version 4.12.393.
Threat Detection Engine updated to 3.79.0.
|WINEP-27396||Sophos Management Communication System||Resolved an issue with using Live Discover to query endpoints that communicate with Sophos Central through an authenticated proxy.|
This version of the Server Core Agent supports the EDR 3 capabilities in Sophos Central. Live Discover allows admins to use Osquery to search the device data across their estate to answer almost any question they can think of. Live Response allows admins to remotely connect to devices and get access to a command-line interface. This enables them to perform detailed investigations or to take prompt action to contain or remediate a threat.
Sophos Live Terminal 1.0.267, which is used for Live Response.
Sophos AutoUpdate updated to version 6.3.210.
Sophos Management Communication System updated to version 4.12.325.
Sophos Health Service updated to version 2.4.7.
Sophos Network Threat Protection updated to version 1.9.2373.
Sophos Endpoint UI updated to version 2.0.367.
Sophos Uninstaller updated to version 22.214.171.124.
Sophos Endpoint Defense updated to version 126.96.36.19940.
Sophos Clean updated to version 188.8.131.52.
Sophos File Scanner updated to version 1.7.417.
Threat Detection Engine updated to 3.78.7.
Sophos Live Query updated to version 184.108.40.2069.
Sophos Diagnostic Utility updated to version 6.3.224.
Sophos Antimalware Scan Interface Protection updated to version 1.2.225.
|WINEP-25272, WINEP-25354||Sophos Network Threat Protection||Resolved an issue in which AsyncComms leaks resources, leading to high resource usage.|
This version of the Core Agent supports Sophos Antimalware Scan Interface (AMSI) Protection which integrates into applications for Windows 10 and Windows Server 2016 and allows for the most common malware scanning and protection techniques. Checks include whether scripts are safe to run, even if they're obfuscated or only generated at runtime. Similar checks can be applied for code that is loaded from sources other than the local disk before it is executed from memory.
This release includes the following new components:
Sophos Management Communication System updated to version 4.12.179.
Sophos Endpoint UI updated to version 1.7.957.
Sophos Endpoint Defense updated to version 220.127.116.11.
Threat Detection Engine updated to 3.78.5.
Sophos Live Query updated to version 18.104.22.1686.
|WINEP-22224||Sophos Endpoint||Resolved an issue with Synchronized Security in which endpoints missed their initial heartbeat configuration policy.|
This version of the Server Core Agent updates the Threat Case and Forensic Snapshot upload features that are available to customers with an Intercept X license:
Sophos Central Server Core Agent updated to 2.5.x to match Sophos Core Agent version.
Sophos AutoUpdate updated to 6.1.356.
Sophos Clean updated to version 22.214.171.124.
Sophos Endpoint Defense updated to version 126.96.36.19905.
Sophos File Scanner updated to version 1.6.540.
Sophos Management Communication System updated to version 4.11.127.
Sophos Network Threat Protection updated to version 1.9.2235.
Sophos UI updated to version 1.7.631.0.
Sophos Uninstaller updated to version 188.8.131.52.
Threat Detection Engine updated to version 3.77.1.
Sophos Message Relay updated to version 184.108.40.206.
Sophos Standalone Engine updated to version 1.5.3.
Sophos Health Service updated to version 2.3.12.
Sophos Live Query updated to version 220.127.116.11.
|WINEP-12344||Sophos Endpoint||Resolved an issue with Sophos Endpoint using excessive CPU resource.|
|WINEP-14723, WINEP-14728, WINEP-14729||Sophos Endpoint||Increased robustness of installation by retrying installation in cases where another MSI installer is already running.|
|WINEP-19408||Sophos Endpoint||Fixed an issue in which the Management Communications System configuration can get corrupted when the computer shuts down unexpectedly.|
|WINEP-20408||Sophos Endpoint||Resolved an issue that prevents files in WebDAV folders from being successfully scanned.|
|WINEP-18710||Sophos Endpoint||Resolved an issue that prevents Sophos Health Service from starting if the events database is corrupted.|
|WINEP-19248||Sophos Endpoint||Resolved an issue in which Sophos Heartbeat sends an incorrect health status to the firewall.|
|WINEP-21961||Sophos Management Communication System||Resolved a delay in user ID information being sent to the Sophos XG Firewall, which can lead to network delay.|
Sophos Live Query version 18.104.22.168, which is used for Managed Threat Response.
Sophos UI updated to version 1.7.452.0.
Sophos Endpoint Defense updated to version 22.214.171.124.
Sophos Endpoint Defense updated to version 126.96.36.199.
Sophos Management Communications System updated to version 4.10.423.
Sophos Uninstaller updated to version 188.8.131.52.
Sophos UI updated to version 1.7.167.
Sophos Endpoint Defense updated to version 184.108.40.206.
|WINEP-20135||Sophos Central Server Core Agent||Resolved an issue on Windows 10 1903 with SSPService.exe using excessive system memory.|
|WINEP-20046||Sophos Central Server Core Agent||Resolved an issue migrating endpoints from Sophos Enterprise Console to Sophos Central.|
|WINEP-19868||Sophos Central Server Core Agent||Improved disk IO performance of SSPEdr.exe process.|
|WINEP-18113||Sophos Central Server Core Agent||Resolved an issue with Windows 7 users being unable to authenticate to XG Firewalls using single sign-on.|
Sophos Endpoint Defense updated to version 220.127.116.11.
|WINEP-19720||Sophos Central Server Core Agent||Resolved an issue with Windows stopping that could occur when installing Veeam software on Cluster computers.|
This version of the Core Agent supports new Server Detection and Response features. Customers with an Intercept X Advanced for Server with EDR license will get these enhancements:
Sophos Network Threat Protection updated to version 1.8.1555.
Sophos AutoUpdate updated to version 6.0.457.
Sophos UI updated to version 1.7.134.
Sophos Endpoint Defense updated to version 18.104.22.168.
Sophos File Scanner has been updated to 22.214.171.124.
This version includes security improvements and addresses various customer issues.
Sophos Clean has been updated to version 126.96.36.199.
Sophos Endpoint Defense has been updated to version 188.8.131.526.
Sophos File Scanner has been updated to 1.4.15.
Sophos Management Communications System has been updated to 4.9.462.0.
Sophos Network Threat Protection has been updated to 184.108.40.206.
Sophos UI has been updated to version 1.7.24.
Sophos Uninstaller has been updated to version 220.127.116.11.
Sophos Message Relay has been updated to version 18.104.22.168.
Sophos Standalone Engine has been updated to version 1.2.23.
Sophos Update Cache has been updated to version 22.214.171.124.
Sophos Health Service has been updated to version 126.96.36.199.
Sophos File Integrity Monitoring has been updated to version 188.8.131.52.
The threat detection engine is 184.108.40.206.
This version of Sophos Central Server Core Agent is supported on Windows Server 2008 R2 and later operating systems. Versions of Windows targeted by Microsoft for non-business environments are not supported.
You can find technical support for Sophos products in any of these ways:
Copyright © 2020 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.
Sophos and Sophos Anti-Virus are registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.