About these release notes

These are the release notes for Sophos Endpoint Security and Control for Windows, managed by Sophos Unified Threat Management (UTM) appliance.

Some of the features mentioned in these release notes are only available if you have the appropriate license.

Note

You may find that you cannot yet download and use the latest version. This is because Sophos releases the software over a number of days, but publishes the release notes on the first day.

Support for Windows 10 was introduced in Version 11.0.5. For more information about Windows 10 support, see knowledgebase article 122504.

Version 11

Components

Sophos Endpoint Security and Control

managed by Sophos Unified Threat Management (UTM) appliance

11.0.15

April 2019

11.0.14

November 2018

11.0.13

January 2018

11.0.12

November 2017

11.0.11

January 2017

11.0.10

October 2016

11.0.9

January 2016

11.0.8

November 2015

11.0.7

October 2015

11.0.5

July 2015

Sophos Anti-Virus

10.7.6.152

10.7.6.128

10.7.6.128

10.7.6.128

10.6.4.1150

10.6.4.1150

10.6.2.509

10.6.2.509

10.6.2

10.6.0.487

Sophos AutoUpdate

5.4.0.751

5.4.0.751

5.4.0.751

5.4.0.724

5.4.0.724

5.4.0.724

5.2.0

5.2.0

5.2.0

5.1.1.1

Sophos Management Communications System

2.0.2

2.0.2

2.0.2

2.0.2

2.0.2

2.0.2

2.0.2

2.0.2

2.0.2

2.0.1.2

Threat detection engine

3.74.1

3.74.1

3.70.2

3.70.2

3.68.0

3.65.3

3.64.0

3.63.0

3.61.0

3.60.0

Version 11.0.15

Note

This update requires a reboot.

Updated components

Sophos Anti-Virus has been updated to 10.7.6.152.

Resolved issues

Issue ID

Component

Description

WINEP-19220

Sophos Anti-Virus

Resolved an issue with Microsoft updates causing machines to stop when starting.

Version 11.0.14

Updated components

The threat detection engine has been updated to 3.74.1. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.

Version 11.0.13

Updated components

Sophos AutoUpdate has been updated.

Resolved issues

Issue ID

Component

Description

WINEP-12228

Sophos AutoUpdate

Registry key required to process Microsoft January 2018 patch.

Version 11.0.12

Updated components

Sophos Anti-Virus has been updated to support changes in the Windows 10 RS3 release. In particular, to provide support for the OneDrive files on demand feature.

The threat detection engine has been updated to 3.70.2. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.

Version 11.0.11

Updated components

The threat detection engine has been updated to 3.68.0. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.

Version 11.0.10

New features

  • Support for environment variables in scanning exclusions. You can now use variables when you set up scanning exclusions. For more information, see the Sophos Endpoint Security and Control help.
  • Sophos Device Control. The following secure removable storage devices have been added:
    • Kingston DT4000 G2
    • Kingston Data Traveller DT5000 16 GB
    • iStorage Datashure◦Integral Courier AES USB 3.0

Updated components

The threat detection engine has been updated from 3.64.0 to 3.65.3. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.

Resolved issues

Issue ID

Component

Description

WINEP-2306

Sophos Anti-Virus

An upgrade to Aspera Connect triggered a block, preventing file uploads and downloads.

WINEP-2677

Sophos Anti-Virus

The SMTP Test option did not recognize multi-line SMTP banners.

WINEP-56

Sophos Anti-Virus

A device driver issue on some Dell laptops caused encryption of CDs to fail.

WINEP-59

Sophos Anti-Virus

After crashing Sophos Anti-Virus was leaving Windows with a potential fatal system error.

WINEP-67

Sophos Anti-Virus

Process exclusions were causing a fatal system error in Windows.

WINEP-3305

Sophos Anti-Virus

A failed rollback was deregistering the Sophos Web Intelligence service.

WINEP-3130

Sophos Anti-Virus

All items were reported incorrectly in the ScannerType field, in Sophos Reporting. They were reported as unknown rather than as on-demand, on-access,and so on.

WINEP-103

Sophos Anti-Virus

Some read only media (optical disks in particular) were causing failure messages in Sophos Enterprise Console.

WINEP-72

Sophos Anti-Virus

Devices trigger Media Transfer Protocol (MTP)/ Picture Transfer Protocol (PTP) alert for model name of drive letter (for example E:).

WINEP-15

Sophos Anti-Virus

Infected temporary Internet Explorer (7 and above) were not being moved to the default infected folder location.

WINEP-1453

Sophos AutoUpdate

Restart required message incorrectly shown when multiple interactive users were logged in, after an upgrade.

WINEP-1522

Sophos AutoUpdate

Sophos AutoUpdate failed to update on a managed computer.

WINEP-1471

Sophos AutoUpdate

Direct updates failed on computers running the Czech version of Windows XP.

WINEP-2785

Sophos Anti-Virus

Dropbox and other similar products did not work correctly on Windows 8 and later when Web Protection was running.

WINEP-2090

Sophos AutoUpdate

Upgrade failed due to changes in password complexity requirements.

WINEP-100

Sophos Anti-Virus

Corrected the error message that appears when a blocked file transfer is attempted. For example if a user tries to copy confidential files to removable media.

WINEP-646

Sophos AutoUpdate

Issues with non-ASCII characters in passwords.

WINEP-2364

Sophos Anti-Virus

Rostrvm Advisor telephone software crashes with Sophos Anti-Virus installed.

WINEP-1479

Sophos Anti-Virus

Improved Sophos Anti-Virus installation and upgrade experience on 64-bit operating systems: Removed the command-prompt window that attempted to interact with the user and caused the Interaction Services Detection error in the Windows Event Log.

WINEP-1449

Sophos Anti-Virus

Streaming videos using the RTSP protocol is not working when Web Protection is enabled.

WINEP-1329

Sophos Anti-Virus

An issue with streaming media over high latency connections.

WINEP-761

Sophos Anti-Virus

Data Loss Prevention (DLP): Some files are incorrectly blocked.

WINEP-364

Sophos Web Control

The Sophos Endpoint Security and Control UI fails to open if Sophos Web Control is removed.

WINEP-273

Sophos Anti-Virus

Enabling DLP slows down a machine when folder redirection is in place.

WINEP-268

Sophos Web Control

Web Control policy cannot be changed on local machine.

WINEP-88

Sophos Anti-Virus

On-demand scanning is not possible if AutoDesk 360 is installed. Error 0x8007045a is displayed.

WINEP-76

Sophos Anti-Virus

Delete errors reported against IDEs on upgrade.

WINEP-66

Sophos Anti-Virus

Sophos Anti-Virus returns a blank threat name, and the threat name is blank in the Sophos Enterprise Console(SEC) reports.

Version 11.0.9

Updated components

The threat detection engine has been updated from 3.63.0 to 3.64.0. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.

Version 11.0.8

Updated components

  • Sophos Anti-Virus has been updated to version 10.6.2.509.
  • The threat detection engine has been updated from 3.61.0 to 3.63.0. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.

Resolved issues

Issue ID

Component

Description

WINEP-2675

Sophos Anti-Virus

A division by 0 error caused by icadapter.dll is seen on machines with less than 1GHz processor speed.

WINEP-2670

Sophos Anti-Virus

If you uninstall the C Runtime, you are left without protection.

Version 11.0.7

Updated components

  • Sophos Anti-Virus has been updated from 10.6.0 to 10.6.2.
  • Sophos AutoUpdate has been updated from 5.1.1 to 5.2.0.
  • Sophos Management Communications System (MCS) has been updated from 2.0.1 to 2.0.2.
  • The threat detection engine has been updated from 3.60.0 to 3.61.0. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.

Resolved issues

Issue ID

Component

Description

WINEP-1740

Sophos Anti-Virus

Sophos Web Intelligence Service (swi_service.exe) registration causes the installation of Sophos Anti-Virus to fail.

WINEP-1540

Sophos Anti-Virus

Sophos Web Intelligence Service (swi_service.exe) is not upgrading when the Sophos Anti-Virus service (SAVService.exe) is upgrading.

WINEP-1240

Sophos AutoUpdate

If the ALUpdate process terminates before sending the “end of update” message (for example, if it crashes before the update is finished), the status “Update in progress” doesn’t change and keeps being displayed in the Sophos Protection tooltip in the notification area.

WINEP-608

Sophos Management Communications System

MCS sends status messages at inappropriate times, causing incorrect statuses to be reported in the management console.

WINEP-165

Sophos Anti-Virus

The use of non-ASCII or double byte characters (for example, for a scheduled scan name or in desktop messaging) causes a “policy non-compliance” status in the management console.

WINEP-90

Sophos Web Control

Sophos Web Control Service cannot be started on computers where the ProgramData folder has been redirected to another location.

WINEP-86

Sophos Anti-Virus

Under certain circumstances, Internet Explorer crashes when Download Scanning under Sophos Web Protection is enabled.

WINEP-65

Sophos Anti-Virus

The LastScan registry key is updated even if a scan has been canceled by a user, thus incorrectly showing that the scan has been completed.

WINEP-35

Sophos Anti-Virus

Email alerts are sometimes not sent.

WINEP-33

Sophos AutoUpdate

The Sophos AutoUpdate NoStartUpCheck registry value is lost after an upgrade.

Version 11.0.5

New features

Updated components

  • Sophos Anti-Virus has been updated to support Windows 10.
  • Sophos AutoUpdate has been updated to:
    • Improve downloading resilience.
    • Remove the use of OpenSSL.
  • The threat detection engine has been updated from 3.58.3 to 3.60.0. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.

Known issues and limitations

Issue ID Component Description
WINEP-2143 Sophos AutoUpdate Sophos AutoUpdate does not support Pentium III processor.
WINEP-1770 Sophos Anti-Virus Sophos Anti-Virus doesn’t support Hypervisor enforced Code Integrity introduced in the Enterprise lockdown mode.
- Sophos Anti-Virus, Sophos Web Control Sophos web protection and web control use a Layered Service Provider (LSP) to intercept network traffic. If web protection or web control is turned on while an incompatible third-party LSP is running, system instability can occur. Therefore, if a third-party LSP that is known to be incompatible is already installed on the computer, the Sophos LSP is not installed. For more information, see https://www.sophos.com/en-us/support/knowledgebase/116241.aspx.

Additional information

System requirements

Sophos Endpoint Security and Control is supported on Windows XP/2003/Vista/2008/7/8/2012/Windows 10. For a full list of system requirements, see System Requirements for Antivirus protection for Windows.

Support for Windows 8, Windows 8.1, Windows Server 2012, and Windows Server 2012 R2

  • Endpoint Security and Control uses toast notifications instead of balloon notifications to display messages on screen.
  • If you specify a user-defined message to be displayed in desktop messages, it is not displayed in toasts. For more information, see https://www.sophos.com/en-us/support/knowledgebase/118233.aspx.
  • If Sophos Anti-Virus cleans up a threat that affects a Windows Store app, it marks the app as tampered with. This causes Windows to offer the user the ability to re-download and re-install the app.
  • Rootkit scanning is not supported on REFS file systems on Windows Server 2012 and Windows Server 2012 R2. If the user attempts a rootkit scan on this file system, a message will be logged in the SAV log telling them that rootkit scanning is not supported.

Device Control

Sophos Device Control does not block removable storage devices that are used as system drives, as this typically destabilizes the operating system.

Shared Windows components

When you install Sophos software, some Windows components that might also be used by non-Sophos software are also installed or upgraded:

Sophos software Shared Windows component
Name File names Versions Date of inclusion with Sophos software
Sophos Anti-Virus Microsoft XML Core Services msxml4.dll 4.30.2100.0 September 2009
msxml4r.dll 4.30.2100.0 September 2009
ATL Library atl90.dll 9.0.30729.4148 June 2013
Microsoft Visual C/C++ Runtime Libraries msvcm90.dll 9.0.30729.4148 June 2013
msvcp90.dll 9.0.30729.4148 June 2013
msvcr90.dll 9.0.30729.4148 June 2013

Legal notices

Copyright © 2019 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.

Sophos and Sophos Anti-Virus are registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.