Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Compliance check interval?

Hi there,

I set up my eas proxy and it's working fine. Compliant devices can check mails, non-compliant devices cannot. But where can I define a compliance-check-intervall? My test-device is - I'm waiting for my testhardware - an old iphone 3GS with iOS 6.1.6. I could install a "forbidden app" that breaks compliance but there was no automatic compliance-check for hours. So: Where to define an intervall?

:49056


This thread was automatically locked due to age.
Parents
  • Hi Detlef,

    this sounds a bit strange.
    As I mentioned in my former post, please be aware that the SMC server does the compliance check on the information it currently has. This could influence the compliance status as well as it uses the application list the device has reported during a former synchronization. Therefore, the latest application list might not be there. Let me provide an example to clarify this:
    Let's say,  you have the compliance check configured to run every four hours.

    The last check was done at 11am.  The user now installs a new "unwanted" appliication at 1pm. iOS devices do not synchronize it's inventory automatically after an app installation. Therefore, the SMC Server does not know anything yet about that application.
    Even though it does the compliance check at 3pm.
    The device will synchronize it's inventory either once a day (the SMC server sends out a sync trigger every 24 hours by default) or if the "Synchronize" button is pressed in the SMC iOS app.

    The compliance check does not do anything directly on the device.

    I hope this helps to understand the compliance check a bit more ;-)

    Cheers

    Stefan

    :49210
Reply
  • Hi Detlef,

    this sounds a bit strange.
    As I mentioned in my former post, please be aware that the SMC server does the compliance check on the information it currently has. This could influence the compliance status as well as it uses the application list the device has reported during a former synchronization. Therefore, the latest application list might not be there. Let me provide an example to clarify this:
    Let's say,  you have the compliance check configured to run every four hours.

    The last check was done at 11am.  The user now installs a new "unwanted" appliication at 1pm. iOS devices do not synchronize it's inventory automatically after an app installation. Therefore, the SMC Server does not know anything yet about that application.
    Even though it does the compliance check at 3pm.
    The device will synchronize it's inventory either once a day (the SMC server sends out a sync trigger every 24 hours by default) or if the "Synchronize" button is pressed in the SMC iOS app.

    The compliance check does not do anything directly on the device.

    I hope this helps to understand the compliance check a bit more ;-)

    Cheers

    Stefan

    :49210
Children
No Data