This is now resolved. To revert the WFP being disabled plesase see the script in GREEN at the bottom of this article.

There have been reports from customers using Senso Cloud alongside Sophos Central about errors while downloading large files on devices:

Couldn’t download - Network issue  

Sophos latest update:

We are releasing the version containing the fix to your problem in core agent 2022.3, scheduled for 10 November. 

I will put the below account for early release:

Customer/Partner/Enterprise name : Customer Name

Java UUID : XXX

Ruby UUID : XXX

We are enabling the fix per customer/case basis, so enablement of the flag would be specific to one customer ID. If you have other customers, reporting the problem, please would you request them to create cases with Sophos support if not done already?

We advise any customers unable to await the update on the 10th of November to contact Sophos support and request early release as per the above

The issue is due to the conflict created by the latest updates from Sophos - "Since the latest update to Sophos Central (2.20.13 - April Release onwards), Sophos Web Control and Web Filtering has received a large overhaul. They have found some Web Filtering products previously used alongside Sophos now conflict."

Working with our customer base we have ensured Sophos have opened a support case:

https://support.sophos.com/support/s/article/KB-000044418?language=en_US

If you are seeing these issues, please ensure you have an open escalation within the Sophos Support Team to assist with a faster resolve. Currently Sophos cannot offer a work around so we need to look at applying this via Senso. Created 2 issues, a direct core conflict with our driver, and HTTPs issues which in some cases can be cleared with exclusions or shut downs, but, as Senso and Sophos is driver level, one of the drivers needs to go, which sadly has to be us as they cannot disable.

Other options such as WFP management from our side however you will lose some functions of Senso, To confirm when the SensoWFP driver is shut down, Senso will lose the following functions:

Dedicated Teacher Machine - https://support.senso.cloud/support/solutions/articles/79000116254-dedicated-teacher-pc

Broadcast Screen – The options to select their own screen as “my computer” , you can add the teachers device to the group which will allow you to select the teachers device to be broadcasted.

Website logs and control – We will not be able to record any visited URL’s nor we will we be able to control website access with block web etc.

Application Control – Application logs will in fact still collect, however you will not be able to apply restrictions around what users can access 

Any element of Senso that will require packet \ IP level inspection will fail as this is what the WFP driver is used for,  this is a complete list of functions you would lose when disabled.

We have the following commands to control the WFP driver (CMD) –

sc config sensowfp start= disabled - Senso WFP off

sc config sensowfp start= auto - Senso WFP enabled

sc query sensowfp - Check status

You can apply this via the Senso Portal using our "Remote Script" module. We advise to create a group "WFP Disabled" and action the following script on client startup: (.ps1) -

$BlankFile = "c:\program files\renato\senso.cloud\WFPDisabled.txt"

$FileExists = Test-Path $BlankFile

if($FileExists -eq $True){

Return}

else {

Set-Service -Name SensoWFP -StartupType Disabled

New-Item -path "C:\program files\renato\senso.cloud" -Name "WFPDisabled.txt" -itemtype file}

Once executed the device will require one final restart to disable the driver. This will leave a .txt document on the device advising the WFP is disabled allowing us to revert once Sophos resolve their issue.


Script to revert the wfp disabled is below. Please restart devices after amending the policy or pushing out the script

$BlankFile = "c:\program files\renato\senso.cloud\WFPDisabled.txt"

$FileExists = Test-Path $BlankFile

if($FileExists -eq $True){

Set-Service -Name SensoWFP -StartupType Auto

del -path "C:\program files\renato\senso.cloud\WFPDisabled.txt"}

else {

Return}