Technical details can be found below: Incoming SSH connections will fail if running Sophos Home v10.0.1a1 + MacOS 11 Big Sur We have identified a possible root cause for this issue. Expected fix to come out on 2021. Incoming SSH connections will fail if running Sophos Home v10.0.1a1 + MacOS 11 Big Sur We have identified a possible root cause for this issue. Expected fix to come out on 2021. Expected fix to come out on 2021. Mac mini (M1, 2020) MacBook Pro (13-inch, M1, 2020) Sophos Intercept X for Mac does not natively support this new chipset; however, it can be made to work using a piece of backwards compatibility software called Rosetta 2. This software needs to be installed on the Mac before joining it to the EAP and it updating to 10.0.2. Sophos released a Big Sur-compatible version at the end of the first week of March, but it is still buggy. We are in contact with ETH IT Services to test this version.
Please note Sophos is not yet supported in macOS Big Sur and the below steps might not work in all circumstances. These steps do not work on M1 / Apple Silicon Macs and will need to wait for an updated installer from Sophos. |
You may also need to grant full disk access.
Sophos Anti-virus requires approval of a System Extension by the end user before it's fully functional. On macOS 11 Big Sur, Sophos On-Access scanning will be disabled until you approve the Sophos System Extension.
The most common situations in which these messages can appear are after a Sophos Home installation/upgrade takes place, or when upgrading your macOS system. In those cases, the first step is to restart the Mac to allow it to load the new/updated components. Additional examples of the message.
Sophos Endpoint Big Sur
After Sophos Anti-Virus installs you will see a prompt to open Security & Privacy in the System Preferences.

Go to the Apple Menu and select System Preferences->Security & Privacy
Click the lock icon in the bottom left if it is not already unlocked. You will be prompted to enter the password for an administrator account. Once unlocked, click the Allow button to allow software from Sophos. If the allow button doesn't show, follow the steps on approving kernel extensions.
You will be prompted to restart the computer. Please do so to enable the Sophos System Extension. After restarting the computer, you can open the Sophos preferences and see that On-Access scanning is now enabled.
Version 9.10.2
New features
Support for macOS 11 Big Sur.
Updated components
The threat detection engine is 3.80.1
Resolved issues
Security improvements.
Version 9.10.1
New features
This release contains early access to a version of the endpoint software that supports macOS 11 Big Sur.
Updated components
The threat detection engine has been updated to 3.80.1.
Version 9.10.0
Updated components
The threat detection engine has been updated to 3.79.0
Resolved issues
Issue ID | Description |
---|---|
MACEP-5389 | Resolved an issue with tabs opening slowly in Google Chrome. |
Version 9.9.8
Resolved issues
Issue ID | Description |
---|---|
MACEP-4973 | Resolved blank captive portal. |
Version 9.9.7
Resolved issues
Issue ID | Description |
---|---|
MACEP-4657 | Improved device control support for large capacity removable storage devices to ensure that they are blocked after restart. |
Version 9.9.6
Sophos Mac Update
This release contains performance improvements.

Resolved issues
Issue ID | Description |
---|---|
MACEP-4493 | Resolved an intermittent issue where web pages may fail to load. |
MACEP-4600 | Improved memory usage when Threat Case creation is enabled. |
MACEP-4602 | Resolved an issue with modified permissions on the man8 directory when using disk encryption. |
MACEP-4606 | Improved support for macOS 10.15 Catalina when using MDM profiles. |
Version 9.9.5
New features
- This release contains improved support for macOS 10.15 Catalina.
Version 9.9.4 Updated
New features
- This release contains support for macOS 10.15 Catalina.
- This release contains security and performance improvements.
Updated components
The threat detection engine version is 3.77.1. For information about the threat detection engine, see the Sophos Threat Detection Engine release notes.
Resolved issues
Issue ID | Description |
---|---|
MACEP-4414 | Resolved an intermittent issue on macOS 10.14 Mojave where the Captive Network Assistant page could fail to load. |
MACEP-4410 | Addressed CVE-2020-10947. |
Version 9.8.5

Resolved issues
Issue ID | Description |
---|---|
MACEP-4314 | Resolved an issue in which Sophos Anti-Virus may incorrectly report successful updates as failures. |
Version 9.8.4
Updated components
The threat detection engine has been updated to 3.76.0. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.
Resolved issues
Issue ID | Description |
---|---|
MACEP-3604 | Resolved an issue on macOS 10.14 Mojave that prevented some customers from connecting to Wi-Fi networks that require a captive portal. |
Version 9.8.2
Updated components
The threat detection engine has been updated to 3.75.0. For information about the changes to the threat detection engine, see the Sophos Threat Detection Engine release notes.
Resolved issues
Issue ID | Description |
---|---|
MACEP-3668 | Resolved a rare kernel panic that can be caused when reading extended file attributes on APFS. |
MACEP-3722 | Installer now provides links to online EULA and Privacy Policy. |
Version 9.7.7
This release contains compatibility improvements.
Updated components
Sophos Mac Os
The threat detection engine has been updated to 3.74.0.
Resolved issues
Sophos Antivirus Mac Big Sur Windows 10
Issue ID | Description |
---|---|
MACEP-3454 | Resolved an issue where some systems may hang on boot with certain USB-C devices. |
