Real time protection disabled (MAC End points)

Hello TripleJ 

Are there any other events in Sophos Central around the time that the status showed real time protection as disabled? Are all of the other services started? Are all of the Sophos kernel extensions allowed?

Thanks!

Hello TripleJ 

Are there any other events in Sophos Central around the time that the status showed real time protection as disabled? Are all of the other services started? Are all of the Sophos kernel extensions allowed?

Thanks!

I am sorry for digging out old topic, but I figured it will be better than starting a new one. I have similar problem. Today I installed agent on mac laptop. At the beginning agent was reporting but I was not able to run all services.

So I followed steps from community.sophos.com/.../134552 and when prompt came out (step 11)  I pressed "Quit Now."

After this the agent states " Real time protection disabled." Any suggestions ?  

Hi BartoszJelen 

Reboot your machine, if you have not, and also please check out this post, under the Mac OS section.

ok ill try that, I have also updated my post with more info ( this may help you to better understand my problem ) 

I had the exact same issue, because the user didn't click Allow to Sophos.

So by doing this, it worked.

If the kexts do not load after the above steps, or the prompt to allow the kext does not show, here are the steps to authorize the kext manually.

1. Boot into macOS Recovery mode.
2. Open Terminal.
3. Run the command: /usr/sbin/spctl kext-consent add 2H5GFH3774
4. Reboot the affected Mac.

Thanks for your response, Francois Brault ! This may help other users who do not see the "Allow" button. This is also the next step if Allowing Disk Access in OS X Catalina does not help get all service started.