Published app sessions are getting loaded with Sophos Endpoint Agent. This is seen under Workspace app Connection Center.

Sophos Endpoint agent is getting loaded into all the Citrix ICA sessions. Citrix Workspace app Connection Center shows the "Sophos Endpoint Agent - Notification Icon".

Sophos Endpoint Agent process is running in the task manager of the VDA machine for the ICA connection user session.

1. Verify the below mentioned registry keys to identify if the Sophos process is included as Startup Apps
2. • HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run --> Sophos key is not available
   • HKCU\Software\Microsoft\Windows\CurrentVersion\Run --> Sophos key is not available.
   • HKLM\Software\Microsoft\Windows\CurrentVersion\Run --> Sophos UI.exe key is present.
3. Remove the Sophos UI.exe key from the registry path HKLM\Software\Microsoft\Windows\CurrentVersion\Run
4. Restart the VDA machine
5. Launch the published application and look for Workspace app Connection center and ensure that Sophos Endpoint Agent is not loaded.

Problem Cause

Sophos UI.exe was configured/included as Startup Apps in the registry