Mobile Threat Defense device status

The Mobile Threat Defense status of a device reported by Sophos Mobile to Intune is determined by the Sophos Intercept X for Mobile status.

The table shows the relationship between the Sophos Intercept X for Mobile status (Intercept X status), the Mobile Threat Defense status reported to Intune (MTD status), and the resulting compliance status of the device in Intune (Compliance status).

Intercept X status

MTD status

Compliance status

Sophos Intercept X for Mobile not managed by Sophos Mobile.

Deactivated

Non-compliant

Sophos Intercept X for Mobile managed by Sophos Mobile. No scan performed.

Activated

Non-compliant

Device scanned and no malicious apps detected.

Secured

Compliant

Malicious apps detected or device is rooted (Android) or jailbroken (iOS).

High severity

As per compliance policy

Device not synced with the server for longer than the maximum sync gap defined in a Sophos Mobile compliance policy.

Unresponsive

Non-compliant