Sophos have advised that after the Big Sur/macOS 11 upgrade, Sophos background scanning on Macs may stop running.
f you run the Sophos Endpoint console, if Sophos scanning has stopped working, you will see this error:
This is due to a change in the way the operating system runs which now requires permissions, so you may get prompted to update the “Full Disk Access” permissions for the scanning extension.
If you see the error above, you can fix it by following these steps:
On the Mac, open System Settings (formerly known as System Preferences).
Select Privacy and Security.
Select Full Disk Access in the left list.
Select the Sophos Endpoint scan extension, even if it is toggled on, and click the minus sign at the bottom to remove it from the list.
Wait a minute, and the Sophos Endpoint scan extension should automatically re-appear in the list.
Select the toggle switch to turn on Full Disk Access.
You can watch this video to see a quick demo of the steps above:
https://techvids.sophos.com/share/watch/nBgBgc6cTjEBwfL2waXpEa?I NOTE: Users can do the below steps themselves or contact CSCS for assistance (CSCS Service Desk 01223 336261, or log a ticket at https://itsupport.medschl.cam.ac.uk/)
For reference:
More information on the issue can be found via this Sophos article https://support.sophos.com/support/s/article/KB-000039501?language=en_US
From November 2022, Sophos advised that Apple have fixed this issue within Ventura/macOS 13