I've been working in an environment that rolled out Sophos Central. At the time of deployment, the Sophos Central client was 2.4.2.
In the last few weeks, we've been experiencing problems with applications/packages failing to download via Software Center. The error that comes back from SCCM is usually 80004005 (generic, useless), and occasionally we get in our SCCM CAS.log on the endpoint --> "CheckExclusiveFileAccessAndSetFilePermissions failed" 80070020 and references to "Failed to do hash verification with preference : 4, Try to verify at next hash algorithm" 80091007.
Experience as SCCM consultants suggest this is most likely caused by AV On Demand scanning of the Source Repsitory.
Also, Software Center (SCCM's "App Store") now delays opening with a white screen and occasionally, after some time -- 10 minutes? It will open up, but not always. This feels like something is blocking the engine behind Software Center.
However, with all policies off and Tamper disabled in Sophos, the issue still occurs.
Removing Sophos 2.5.2 from the machine fixes all the issues described above.
I have previous experience with Sophos Intercept-X causing problems with Hyper-V back in the Win10 1709 days. The issue I'm experiencing here feels somewhat similar, in that no error logs are recorded in Sophos.
The team I am working with have reached out to their Sophos account manager and have been issued with a "Hitman Pro BETA Fix" (again, similar to the what happened when I faced Hyper-V issues in 1709) -- but I'm not sure this has helped.
Has anyone else noticed this?
This thread was automatically locked due to age.
