Policy non-compliance: Automatic Updates

Hi jend7,

Here's  a general article regarding those messages. And one more here. 

Can you manually run a Sophos update on those Macs? Are they behind any firewalls or network restrictions? 
Is there any difference between the ones without issues, and the affected ones (network wise) ? 

What Sophos products are installed? And, could you please upload a screenshot of what you are seeing?

Thanks!

I have several Macs reporting this as well, starting on 10/20. This seems to be triggered by a Sophos update (what else is new?). I see the "Policy non-compliance: Automatic Updates" alert post minutes before the Mac client updates. Alert does not go away after the update or after reboot.

Looking at the client on one of the Macs reporting the violation, in the Sophos Diagnostic Tool > Services > Sophos AutoUpdate is green.

Looks like another Sophos ghost notification to me.

Hi Karl,

Can you try acknowledging the alert and let me know if that makes it go away ? Please follow these guidelines as needed .

Regarding policies, please have a look at this article. 

Let me know the outcome please.

Regards,

Hi Karl,

Can you try acknowledging the alert and let me know if that makes it go away ? Please follow these guidelines as needed .

Regarding policies, please have a look at this article. 

Let me know the outcome please.

Regards,

Hi Barb,

I am fairly certain acknowledging the alert will make it go away. However per https://docs.sophos.com/central/Customer/help/en-us/central/Customer/concepts/AlertsDeploymentUpdatingCompliance.html, "When the device is back in compliance, the alert will be automatically cleared." The product is either failing to do so or it still thinks there is a problem.

What are you referencing or wanting me to look at in the linked policy article? The "Last Time Policy Received" timestamp for the Auto Update policy is recent and the same as the others. If it wasn't, I would assume that the Sophos AutoUpdate service would not be green.

Karl

Hi Karl,

I am trying to get more info so that I can better assist you (I reached out to our team internally, and I will update this thread with additional details once I get a response).

In the meantime:
Are you using Controlled updates?
If yes, can you test disabling the policy in one of the Macs and let me know if that helps? 

Regards,

Just to confirm what others have been saying - 50 Macs, all now giving me this alert - the ones I have checked all update fine, all seem fine in the Sophos Diagnostic and are all reporting back to the Sophos Central dashboard. Issue not cleared after manually updating/rebooting.

Not using controlled updates or scheduled updates - just using the default settings/policy - no changes client/network end. I would like to click 'Mark as Acknowledged' as suggested and hope it all goes away but would prefer the issue to be identified and fixed.

I also have been receiving the same message for all the devices I manage (12 devices). I have manually logged into each machine and forced an update and the alert still shows in the portal.