SEC not talking properly to DMZ server?

Hi

I use Sophos Endpoint and Security v9.5 and SEC v4.0.2.2370, with W2003 servers and Vista clients.

All works well, apart from 1 web server in our DMZ. The DMZ server says it is happy, and gets updates as it should, and runs it automated scan at night.

However SEC show a yellow ! against that server, and says it Differs from Policy, and shows no details against that particular server. I cannot seem to get SEC to update the policy, even though it appears to be all working on the DMZ server.

We have allowed TCP and UPD port 8192-8194 through our firewall to the DMZ.

Do I need to allow another port or aynthing?

Thanks in Advance