Skip to content
Sophos Central Endpoint: macOS Ventura Compatibility Issues
October 26, 2022

Sophos Central Endpoint: macOS Ventura Compatibility Issues

Overview

On Monday, October 24, 2022, Apple is releasing macOS Ventura.

This new macOS version updates a record in the operating system that inadvertently causes any existing application using security client extensions with Full Disk Access to lose that privilege. There is a scenario where the impact is that security scans are turned off without warning to the administrator for some endpoint security products, including Sophos Endpoint Protection.

You can use Application Control in Sophos Central to prevent end-users from upgrading to macOS Ventura. In your Application Control policy settings, select “macOS 13 Installer” in the “System tool” category. Instructions on creating and editing policies can be found in the Sophos Central Admin Help.


Product and Environment

  • macOS Ventura
  • Sophos Central macOS Endpoint (Intercept X)
    • Version 10.4.1 or later is required when using macOS Ventura. This version is already available in early access and customers will be automatically upgraded starting the week of October 24, 2022.

Note: Sophos Enterprise Console (SEC) managed systems only support up to macOS 12 Monterey.

Main Issue

Upgrading a device to macOS Ventura

When upgrading to macOS Ventura, please follow the steps below after the upgrade to Ventura completes.

Devices managed by a Mobile Device Management (MDM) solution

There is no action required. Sophos Endpoint Protection will protect the device as expected.

Installing Sophos Endpoint Protection onto a device that has already been upgraded to macOS Ventura.

There is no additional action required. Sophos Endpoint Protection will protect the device as expected.

Upgrading to macOS Ventura on a device that is already running Sophos Endpoint Protection

Please follow these steps:

  1. Open the System Preferences.
  2. Select Privacy and Security.
  3. Select Full Disk Access in the left list.
  4. Click the lock to be able to make changes and authenticate.
  5. Select the Sophos Endpoint scan extension, even if it is toggled on, and click - to remove it from the list.
  6. Wait a minute, and the Sophos Endpoint scan extension should automatically re-appear in the list.
  7. Select the toggle switch to turn on Full Disk Access.

Uninstalling and reinstalling Sophos Endpoint Protection does not correct this issue. The above steps must still be performed.

Other Known Compatibility Issues

Sophos Endpoint Protection's web protection does not function on macOS Ventura virtual machines

Sophos Endpoint Protection web protection functions normally on physical systems running macOS Ventura but does not work with virtual machines running macOS Ventura. We have opened a case with Apple regarding this.

Sophos Endpoint Protection agent can be turned off through System Settings

In macOS Ventura, users with Administrator credentials can turn off Sophos Protection Agent through System Settings > General > Login Items.

This setting can be controlled by deploying an MDM profile. See Installing Endpoint Protection on Macs for more information.

Login Itemsx600.png


Turning off background items for the Sophos Endpoint prevents its functionality.

macturnedoffx600.png

backprocnotrunx600.png

The Sophos Endpoint UI may stop responding after opening [Fixed in 10.4.1]

In macOS Ventura, the Sophos Endpoint UI may stop responding after opening. Please upgrade to Sophos Endpoint Protection version 10.4.1 or later.

uicrashx350.png

Red health status after update [Fixed in 10.4.1]

When updating the Sophos Endpoint agent on macOS Ventura, the device remains in red health even after a restart. Another device restart is needed to complete the installation and return the device to Green health status. Please upgrade to Sophos Endpoint Protection version 10.4.1 or later to avoid this issue.

Previous article Sophos MDR and Third-Party Cybersecurity Technologies
Next article Advisory: Sophos Central Maintenance scheduled

More Sophos News Posts

See more

Featured collection

  • Sophos XGS 107 / 107 Wireless By Sophos - Buy Now - AU $782.76 At The Tech Geeks Australia
    Sophos XGS 107 / 107 Wireless By Sophos - Buy Now - AU $782.76 At The Tech Geeks Australia
    Sale Sale

    Sophos XGS 107 / 107 Wireless

    $782.76 - $1,192.00
    $782.76 - $1,192.00
    $1,172.00
    $782.76 - $1,132.00
    $782.76 - $1,132.00
    $782.76

    The Sophos XGS 107 Firewall Appliance is built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xs...

    View full details
    $782.76 - $1,192.00
    $782.76 - $1,192.00
    $1,172.00
    $782.76 - $1,132.00
    $782.76 - $1,132.00
    $782.76
    Sale Sale
  • Sophos XGS 116 / 116 Wireless By Sophos - Buy Now - AU $997.55 At The Tech Geeks Australia
    Sophos XGS 116 / 116 Wireless By Sophos - Buy Now - AU $997.55 At The Tech Geeks Australia
    Sale Sale

    Sophos XGS 116 / 116 Wireless

    $997.55 - $1,887.00
    $997.55 - $1,887.00
    $1,886.00
    $997.55 - $1,792.00
    $997.55 - $1,792.00
    $997.55

    The Sophos XGS 116 Firewall Appliance is built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xs...

    View full details
    $997.55 - $1,887.00
    $997.55 - $1,887.00
    $1,886.00
    $997.55 - $1,792.00
    $997.55 - $1,792.00
    $997.55
    Sale Sale
  • Sophos XGS 87 / 87 Wireless By Sophos - Buy Now - AU $596 At The Tech Geeks Australia
    Sophos XGS 87 / 87 Wireless By Sophos - Buy Now - AU $596 At The Tech Geeks Australia
    Sale Sale

    Sophos XGS 87 / 87 Wireless

    $596.00 - $990.00
    $596.00 - $990.00
    $983.69
    $596.00 - $940.00
    $596.00 - $940.00
    $596.00

    The Sophos XGS 87 Firewall Appliance is built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xst...

    View full details
    $596.00 - $990.00
    $596.00 - $990.00
    $983.69
    $596.00 - $940.00
    $596.00 - $940.00
    $596.00
    Sale Sale
  • Sophos XGS 126 / 126 Wireless By Sophos - Buy Now - AU $1356.15 At The Tech Geeks Australia
    Sophos XGS 126 / 126 Wireless By Sophos - Buy Now - AU $1356.15 At The Tech Geeks Australia
    Sale Sale

    Sophos XGS 126 / 126 Wireless

    $1,356.15 - $2,487.00
    $1,356.15 - $2,487.00
    $2,484.00
    $1,356.15 - $2,362.00
    $1,356.15 - $2,362.00
    $1,356.15

    The Sophos XGS 126 Firewall Appliance is built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xs...

    View full details
    $1,356.15 - $2,487.00
    $1,356.15 - $2,487.00
    $2,484.00
    $1,356.15 - $2,362.00
    $1,356.15 - $2,362.00
    $1,356.15
    Sale Sale
  • Sophos XGS 136 / 136 Wireless By Sophos - Buy Now - AU $1714.74 At The Tech Geeks Australia
    Sophos XGS 136 / 136 Wireless By Sophos - Buy Now - AU $1714.74 At The Tech Geeks Australia
    Sale Sale

    Sophos XGS 136 / 136 Wireless

    $1,714.74 - $3,914.00
    $1,714.74 - $3,914.00
    $3,913.00
    $1,714.74 - $3,718.00
    $1,714.74 - $3,718.00
    $1,714.74

    The Sophos XGS 136 Firewall Appliance is built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xs...

    View full details
    $1,714.74 - $3,914.00
    $1,714.74 - $3,914.00
    $3,913.00
    $1,714.74 - $3,718.00
    $1,714.74 - $3,718.00
    $1,714.74
    Sale Sale
Shop collection