servers not alerting when need reboot

Hello April Beachy 

Alerts requiring a reboot after an update are shown 14 days after an event is received for 'reboot recommended after software update' + no event saying the system rebooted. (Alerts FAQ)

Alerts that may have been listed are removed when these are acknowledged. You should still be able to see these events in Logs and Reports > Events > check Product Updates - Reboot recommended/Reboot required.

If you think that some email alerts may be disabled, go to Global Settings > Configure email alerts for your settings.

So you are saying that the alerts will not show until 14 days after they first say they need a reboot?

Alerts are configured to show.

The problem is I've got servers and that have been prompting for a reboot since Feb 11, but that is not appearing anywhere in the alerts that the servers need rebooted.

Hello April Beachy 

Yes, the first event will be "Reboot recommended after software update" is not yet an alert. This will kick off a timer, so to speak, that if there is no restart event after 14 days, then a Reboot Required alert is sent.

The problem is I've got servers and that have been prompting for a reboot since Feb 11, but that is not appearing anywhere in the alerts that the servers need rebooted. they still say:

Reboot to complete update; computer stays protected in the meantime

Hi April Beachy 

Would you please check whether the server has been rebooted anytime since 11th February?

I can verify that the server has not been rebooted for 27 days, does not appear in the alerts and Sophos states it needs rebooted.

I can verify that the server has not been rebooted for 27 days, does not appear in the alerts and Sophos states it needs rebooted.

Hello April Beachy 

Does the Events list in that Device's page in Sophos Central Reboot required? 

It says: Reboot to complete update; computer stays protected in the meantime

The other servers have the same symptoms that have not been rebooted.

Hello April Beachy 

Discussed this a bit with the folks here, and it was said that there are certain update events that will not trigger a "reboot required" event after 2 weeks.

If there was a major update to Sophos Endpoint (SAV, Intercept X, etc) then these are the types of events that will eventually require a restart. 

Occasionally an update to the Central Server Protection agent will require a reboot to upgrade a component to the latest version. This reboot will never be forced by Sophos, there is no impact to protection during the period before the reboot is completed. This also does not impact the ability for new threat detection updates to be applied to the Server. New installations will also request a reboot but likewise there is no impact to protection during the period before the reboot is completed.

It is recommended scheduling a reboot during your next maintenance Window to ensure that you are running the latest version of all components.