Create a new Configuration Profile, or select an existing one.

Go to Computers > Configuration Profiles.

Grant full disk access for Sophos components

(Big Sur - macOS 11) Configure the system extension at the last step.

Note: One additional step is required if you want to apply the profile to a macOS 11 (Big Sur) device. There are 2 steps required to configure compatibility for macOS 10.15.x (Catalina) and below.

Sophos is actively working on updating the detection to correct this. On October 31st, an issue was found where the notice is triggered if the permissions have been added via an MDM profile, as Apple records these in a different location. Note: In Sophos for Mac 9.9.5, a notice is displayed if required permissions are not fully enabled.

The instructions below can be followed to prepare device profiles for a future macOS 10.15+ upgrade. You may want to prepare your devices to be ready for an upgrade to macOS 10.15+. This following steps can also be applied to machines running macOS 10.14.x.The endpoint will check after each reboot (and continuously every 30 minutes) if the system permissions are compatible. To alert and inform users, Sophos implement a notification popup. Granting the disk access for each required process.

Allowing the Sophos Team ID (2H5GFH3774).

The information below covers both topics: With macOS 10.15, Apple added a new default behavior that prevented applications from writing to the disk. With macOS 10.13, Apple introduced a new security level that required each 3rd party vendor's kernel extension to be approved. This required Team ID to be allowed, also known as the Apple Developer ID.

JAMF Pro keys for 10.0.2 EAP to pre-approve the proxy configuration.

(Big Sur - macOS 11) Configure the system extension.

Grant full disk access for Sophos components.

Sophos intercept x for mac