Applies to: Sophos Home Premium and Trial - (Windows)

Applications that present incompatibility issues with Sophos Home Exploit protection may be added in local exclusions. Additionally, installation failures for software can sometimes be resolved by temporarily disabling exploit protection to allow the installation to complete, if a local exclusion is not effective.

This article describes the steps on how to add local exclusions for a specific software and how to temporarily disable Exploit Mitigation for a computer to allow an installation to complete.

Adding a local exclusion to allow an application to Run/Install

Instructions

Note: Sophos does not recommend adding exclusions unless you are 100% sure the application is safe. We recommend customers submit a sample of the application's executable (.exe) to Sophos' Lab for a review and, if needed, a re-categorization https://secure2.sophos.com/en-us/support/submit-a-sample.aspx

1. Double-click on the Sophos Home icon at the system tray. This opens the Sophos Home main window.

   

2. Click on Troubleshooting.
   

   

3. Go to Local Exclusions section then click on the Add button.

   

4. Locate the program's executable (.exe) that you wish to exclude. The application will then appear on the list.

Disabling Exploit Mitigation Protection to allow software to install 

Note: Temporarily disabling exploit mitigation leaves your computer vulnerable during this short time. Please perform these steps at your own discretion. 

Instructions:

1. Log in to your Sophos Home Dashboard and click on the computer name for which you wish to disable exploit mitigation protection. 

2. Click on the PROTECTION tab  ---> Exploits
3. Toggle off Exploit Mitigation

4. Reboot the computer
5. Attempt to run/ re-install software
6. Ensure you re-enable Exploit Mitigation upon successful installation

Disabling a specific Protected application to allow software to run

Note: Sophos does not recommend to turn off protection for a specific application, but the steps can be performed if customers are sure that this is a False Positive and need to launch a specific app that may present compatibility issues with Exploit Protection. 

Instructions:

1. Log in to your Sophos Home Dashboard and click on the desired computer 
2. Click on the PROTECTION tab  ---> Exploits
3. Locate the Protected applications section and click Show Applications to expand it

4. Un-check the desired application (red button) 
5. Reboot the computer and re-try launching the program

Related information

• Setting scan exceptions
• Removing an application from the Privacy Guard exceptions