Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 4901 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint Policies. Not updating?

JaffNSX

For some reason our Policy Compliances don't seem to be updating on workstations.

It updates on a very small handful, it never used to be a problem.

If i update any of the policies the workstations don't seem to get the updated policy.

I recently enabled both the new policies "patch" and "web control" in the display window the machines never got sent the policy and it is just blank as if they havnt been set to one of the policies.

This also applies for the original policies, they don't seem to be updating on the workstations and within Enterprise console as mentioned nearly all machines say "differs from policy".  This is across the board, Mac, Pc, Windows 7 and Vista.

Majority of the machines log on to the domain, Sophos appears to see the machines as it has the green or red cross on the machines. Sophos was installed with Admin right Domain\Admin etc.

I have tried re-installing Sophos on the machines also and that doesnt seem to resolve the issue.

Thanks.

:23441


This thread was automatically locked due to age.
  • 0

    Hello JaffNSX,

    when you update a policy - does the status for the potentially affected clients change to Awaiting policy transfer?

    I'd check the envelopes folder on the server (%ProgramData%\Sophos\Remote Management System\3\Router\Envelopes ) just to make sure there isn't a large queue. Also the router logs on a client ([%ProgramData%|%ALLUSERSPROFILE %\Application Data]\Sophos\Remote Management System\3\Router\Envelopes ) should show whether the policies are received on the client.

    Christian

    :23445
  • 0

    Those folders were empty.

    After searching the KB i found a article for essential needed ports and few other things. This now allows me to roll out installs via enterprise console which before i wasnt able to do which then appears to update the machine with the current policies. Not ideal but works.

    I will keep a eye on it, as opening these ports may fix the policy updates.

    :24243