Setting up a Sophos Central Install Monitor Policy (Windows & macOS)
You can set up a workstation and server Component Monitor to detect and alert on Sophos Central Endpoint not being installed. This monitor can also run an install Component for Sophos Central is not installed.
***This will require the Sophos Central [WIN] and/or [macOS] to be added from the ComStore***
This Policy can be set up at the Account Level but would affect all Sites. Best Practice is to set up the Policy per Site.
Click into the Site you want to add a Policy to and click on the Policies Tab
Then click on New site policy
***You will need a Policy for Windows and for macOS to monitor both***
Fill in the Name: Sophos Central Monitor (Windows) or Sophos Central Monitor (macOS)
Type: Monitoring
Based on: -New Policy-
***If setting up two monitors, one for Desktops and one for Servers. Add - Desktop or -Server to the end of the Name***
Click Next
Click on Add a target
***Custom Targets can be used and setup, but are outside of the Supported Method***
In the drop-down for Target Type select Default Device Filter
In the Default Device Filter add All Windows Desktops.
***You can also add All Windows Server to the Default Device Filter if you want it to be part of the same monitor. Best Practice would be to create a separate Sophos Central Server Install Monitor Policy***
Click Add
Next click on Add a monitor
In the dropdown select Component Monitor and click Next
In the dropdown for Component Monitor, select the Sophos Central Install Monitor [WIN]
For the execute every (hrs : mins) - 30 Minutes would be the minimum recommend interval. This can be increased to what monitor time fits into your SLAs.
For the Alert Prioity it is recommended to select High if using automated installation and Critical for manual installation
Auto-Resolution can remain at default.
Automated Installation when Sophos Central Endpoint isn't installed.
Click to check the box for Run the following component
Select the Sophos Central [WIN] component - This is will against the pre-configured site variable.
The image below is the default options and can be adjusted based on the products needing to be installed.
***If you would rather simply be notified to can use the Email option below instead***
Optionally you can have the Monitor Policy create a New Ticket
Click Next to Finish
The last step is to click Save and Push Changes
Examples
This example shows a monitor alert for Endpoint Not Installed, followed by a recent activity of the Sophos Central installation.
Click on the Stdout to view the log from the installation job.
This is an example show a monitor status for Sophos Central Status: Protected after the Sophos Central installation completes.
