SOPHOS Intercept X advance with EDR - Host Checker issue

[gilipeled]

Hello Comunity.

After all our stations were updated last weekend to the latest Sophos Intercept X endpoint version, all of them are failing the check of AV definition and then it does not pass the checker.

We also opened a case on Sophos but maybe someone here has a clue.

We asked the suplier that holds the Pulse Secure server tu update to the latest version al needed but still all computers of the customer tat uses Pulse secure do fail now in host checker.

I need a magician here in the furom that will help us to solve the customer issue.

Thanks in advance for all of you.

[[email protected]]

@gilipeled Can you please open a support ticket with us for further debugging this issue as this might need to be investigated by our engineering team?

ESAP 3.7.6 (latest) supported list shows the below Sophos products:

Reference - https://www-prev.pulsesecure.net/download/techpubs/current/2286/pulse-connect-secure/esap/3.7.x/ps-e... (Page# 51)

[muz21]

We have had the same issue since Sophos Agent was updated on March 4th. The error is "Sophos Endpoint Agent 2.15.4 does not comply with policy.  Compliance requires latest virus definitions."

and Sophos replied:

"I recommend contacting Pulse Secure to ask about the configuration of Virus Signature Monitoring. There could be a configuration to do to support the current anti-virus version."

We have snoozed Sophos, and tried using McAfee and getting the same error.

The latest ESAP (March 10th) was also applied, and made a difference for a moment in time, and then the same error occurred.

Hope we all get an answer soon.