Server Summary

The Summary tab in a server's details page lets you see server details.

You can manage the server from here.

Security status

In the left-hand pane, you can see the security status and take actions.

Note The left-hand pane is always shown, even when you click the other tabs on this page.

If you see "Sophos Security VM" under the server name, the server is a host with a Sophos security VM installed. You'll also see additional information in the "Device Status" summary.

Actions you can take

The actions links and buttons are in the left-hand pane.

  • Delete Server: Deletes the server from Sophos Central.
    Warning You should uninstall the Sophos software before deleting a server.
  • Update Now: Updates the Sophos agent software on the server.
  • Scan Now: Scans the server immediately.

    The scan may take some time. When complete, you can see a "Scan 'Scan my computer' completed" event and any successful cleanup events on the Logs and Reports > Events page. You can see alerts about unsuccessful cleanup in the Alerts page.

    If the server is offline, it will be scanned when it is back online. If a computer scan is already running, the new scan request will be ignored and the earlier scan will carry on.

  • Lock Down: Prevents unauthorized software from running on the server.

    This option makes a list of the software already installed on the server, checks that it is safe, and allows only that software to run in future.

    If you need to make changes on the server later, either unlock it or use the Server Lockdown preferences in the server policy.

  • Unlock: Unlocks the server. This button is available if you have previously locked down the server.

Recent events

This lists recent events on the server.

For a full list, click the Events tab.


The summary shows these details:

  • Last Sophos Central Activity: The last time the server communicated with Sophos Central.
  • Last Agent Update: The last time the Sophos agent was updated.
  • Agent Version: The version number of the Sophos agent.
  • Installed component versions: Click this to see a full list of the Sophos components and their version numbers. This is only available for Windows servers.
  • IPv4 Address
  • IPv6 Address
  • Operating System: If this is shown as "Sophos Security VM", the server is a host with a Sophos security VM installed.
  • Lockdown Status : Shows the status of Server Lockdown, which prevents unauthorized software from running on servers.
  • Connected Guest VMs. You see this only if the server is a host with a Sophos Security VM. It shows the number of guest VMs connected to the Security VM. Click the number to see a list of the guest VMs.

    If no guest VMs are powered on, or if you’re still installing agents on them, you may see zero guest VMs.

    If you have enabled guest VMs to migrate between Security VMs, this can affect the number of guest VMs connected.

    Usually, a connected guest VM is protected. However, if the agent is newly installed, or there is a problem, scanning for threats may not have started yet.

  • Group. Shows the group the server belongs to (if any). Change group lets you add it to a group, move it to a different group, or remove it from its current group. A server can only be in one group.
  • Tamper Protection. This shows whether Tamper Protection is enabled on the server or not. Click Disable Tamper Protection to manage the tamper protection password for the server.

Update Cache and Message Relay status

If you're using update caches or message relays on your network, you see this status information.

If the server is being used as an update cache or a message relay, you see:

  • The status of the cache and when the last update was made. It also shows how many computers are using it as a cache.
  • The status of the relay and how many computers are using it.

Alternatively, if the server is getting its updates from a cache (or using a relay) that's been set up elsewhere, you see details of where that cache or relay is.

Windows Firewall Status

Windows Firewall is active and being managed on the computer. It also shows:

  • Whether Windows Group Policy is being used.
  • The active network profiles.
  • If other registered firewalls are installed and active.