
:max_bytes(150000):strip_icc()/Controlpanel-7f977e5fdb744071815f38aa1db3e3fc.jpg)

In Session purpose, summarize your session.Ī connection to the computer opens in another browser tab. We recommend signing in with a Sophos ID, because other methods, such as a Microsoft federated sign-in with MFA, might not let you access Live Response.īefore you start, ensure Live Response is turned on in Overview > Global Settings > Endpoint Protection > Live Response. You must sign in with multi-factor authentication (MFA). You must be a Super Admin or have a custom role that includes Start Live Response sessions on computers. To use Live Response, you must meet these conditions: You can connect to the computer even if it’s isolated. Live Response allows you to connect to the computer to investigate and remediate possible security issues.
Sophos antivirus uninstaller software#
You must uninstall the Sophos software before deleting a computer.

Click it to reconnect the computer to the network. When a computer is isolated, you see the following under the computer icon and security status.Ī link labeled Remove from Isolation. You can still manage the computer from Sophos Central, and you can remove it from isolation at any time. You might want to do this if it has potential threats on it. Isolate isolates the computer from the network. This option is available if you have Intercept X Advanced with XDR. Click More actions to show the extended list of actions.Īll the actions are described below. You can take actions on the computer with the buttons and links in the left-hand pane. Red warning sign if there are high-priority alerts. Orange warning sign if there are medium-priority alerts. Green checkmark if there are low-priority alerts or no alerts. The left-hand pane always shows, even when you click the other tabs on this page.Īn icon shows you whether the computer has any security alerts: Icon
