Guest User!

You are not Sophos Staff.

Computer not reporting Peripheral Block Event to Central Management Console

I have one computer that logs a USB Peripheral Block Event locally on the Sophos Agent when a USB printer is plugged in, but the event does not get reported to the Central Management Console.  The Sophos client is up to date and the computer has been rebooted.  The Sophos client on the computer reports all the other events to Central but not this one peripheral block.  Any ideas as to why or how to fix it?  I need to exempt this USB device.  Thanks.



Edited TAGs
[edited by: Gladys at 7:30 AM (GMT -8) on 1 Dec 2022]
Parents Reply
  • Try stopping and re-starting the "Sophos MCS Agent" and "Sophos MCS Client" services on the local device. Once done, check the "Endpoint Self Help" tool to ensure the Management Communication tab shows a recent successful communication.

    If you remove and re-plug the USB drive once this is done, the event should be communicated to Sophos Central shortly after. 

    Let me know if this works for you.

Children
No Data