A triumvirate of Sophos-signed Configuration Profiles

“Based on customer feedback we are now providing separate configuration profiles for each major supported macOS version.”

Kevin Kingston, 9-Nov-2022

Background

On 24-Oct-2022 — macOS Ventura launch day — I was able to officially comment about macOS Ventura & Sophos-signed Configuration Profiles

TL;DR for Mac Admins: Distribute the “original” Sophos Endpoint.mobileconfig to all of your fleet running macOS Monterey (and earlier) and only distribute Sophos Endpoint.mobileconfig version 1.1 to computers after they’ve upgraded to macOS Ventura

Feedback

Thanks to all who provided feedback to Sophos so that we now have three, discernibly named Configuration Profiles:

• Sophos Endpoint Big Sur v1.2.mobileconfig
• Sophos Endpoint Monterey v1.2.mobileconfig
• Sophos Endpoint Ventura v1.2.mobileconfig

Read Me First.rtfd

The remainder of this article is an excerpt from the included Read Me First.rtfd so that my newly installed SEO WordPress plug-in won’t yell at me.

“Please refer to the ReadMeFirst file located under the “Deployment Tools” folder for change log for each Configuration Profile.”

Managing the new Login Items feature in macOS 13 Ventura

Sophos Endpoint for Big Sur

This profile is suitable for using with macOS Big Sur with support for the following products:

• Sophos Intercept X
• Sophos Device Encryption
• Sophos ZTNA

This profile automatically:

• Approves Sophos system extensions and transparent proxies
• Approves Full Disk Access and notifications for Sophos processes
• Configures VPN settings for Sophos ZTNA

Sophos Endpoint for Monterey

This profile is suitable for using with macOS Monterey with support for the following products:

• Sophos Intercept X
• Sophos Device Encryption
• Sophos ZTNA

This profile automatically:

• Approves Sophos system extensions and transparent proxies
• Approves Full Disk Access and notifications for Sophos processes
• Configures VPN settings for Sophos ZTNA

Sophos Endpoint for Ventura

This profile is suitable for using with macOS Ventura with support for the following products:

• Sophos Intercept X
• Sophos Device Encryption
• Sophos ZTNA

This profile automatically:

• Approves Sophos system extensions and transparent proxies
• Approves Full Disk Access and notifications for Sophos processes
• Configures VPN settings for Sophos ZTNA
• Prevents user disablement of “Login Items” for Sophos processes