out-of-date computers has exceeded the critical level emails

Hi,

We've been trying to work out how these warning emails can be made useful and are so far struggling, we receive multiple emails through out the day and upon checking the Enterprise Console 5.0.0.8 there appears to be no rhym or reason between what triggers them.

We have the configure dashboard settings set as follows:-

Policy and Protection

Computers that differ from group policy 1.00% warning 5.00% critical

Connected out-of-date computers: 1.00% warning 12.00% critical (this was increased to see if it would reduce emails, it didn't)

Latest protection from Sophos

Time since last update from Sophos: 24 hours warning, 96 hours critical.

Now my understanding of the above would result in computers only showing in the out-of-date computers section when they last updated over 24 hours ago but we don't see this, some are only out by 12 hours which shouldn't even mark them for warning never mind critical.

Can anyone explain why we are getting these critical out-of-date emails when machines clearly are not?

Thanks