Installation and configuration of Sophos Endpoint for macOS

After searcing, troubleshooting endlessly, contatcting Sophos Support for having guidelines on how to push and configure Sophos Endpoint to our users via Microsoft Intune. Today I have have finally made the setup work, and I'm happy to share it with you.

If you use the following guide you can sucessfully install Sophos to your macOS Intune enrollded devices...

Auto install Sophos to devices.

Start by navigating to https://intune.microsoft.com/

Devices
macOS
Scripts
+ Add
Name your script and add description if needed. This is optional
Open Notepad or any other editor and use the following code:
#!/bin/bash
mkdir /tmp/Intune

if [ -d /Applications/Sophos/ ];
then
echo "Already Installed"
touch /tmp/Intune/Sophos_AlreadyInstalled.tmp
exit 0
else

SOPHOS_DIR="/tmp/Sophos_Install"
mkdir $SOPHOS_DIR
cd $SOPHOS_DIR

# Installing Sophos
curl -L -O "###URLFROMSOPHOSADMIN###/SophosInstall.zip"
echo "Sophos Install Downloaded"
unzip SophosInstall.zip
chmod a+x $SOPHOS_DIR/Sophos\ Installer.app/Contents/MacOS/Sophos\ Installer
chmod a+x $SOPHOS_DIR/Sophos\ Installer.app/Contents/MacOS/tools/com.sophos.bootstrap.helper
sudo $SOPHOS_DIR/Sophos\ Installer.app/Contents/MacOS/Sophos\ Installer --quiet
echo "Sophos Installed"
rm -rf $SOPHOS_DIR
touch /tmp/Intune/Sophos_Installed.tmp
exit 0
fi
Replace ###URLFROMSOPHOSADMIN### with your own install information.
This is how you get the url:
In Sophos Admin go to Devives and Installers.
Click on the link for "Download Complete macOS Installer"
I use Microsoft Edge, this an example of how to do this with this browser. When download is complete, right click in the downloaded file:
Paste the link somewhere, like notepad

Copy and add the full URL in the code above.
Now save the file as Sophos_Install_macOS.sh or any other name you like, but make sure it's a .sh file.
Now back in Intune admin center, upload the .sh file
These are the settings I have used for our organization.

I would reccomend deploying this policy to a group of test users before you deploy the policy to all users in your tenant.

Convert the Sophos .mobileconfig file to XML format.

Start by navigating to Sophos Admin.

Find your user and email the setup link to yourself.
On your macBook Download the installer that you have recieved via email.
In the package downloaded navigate to Deployment Tools, and open the folder called Sophos Endpoint.
Select and move the correct .mobileconfig file depending on what OS version your users have to a directory of your choice.
Open Terminal, and navigate to the folder where you saved the file.
Use the command "security cms -D -i name_of_config_file.mobileconfig > NewMobileconfig.xml"
Since I'm a Windows users I have sent the file to my Windows device for further config once I have created the .xml file.