Alerts for installation and compliance
The following types of alerts are for issues that affect installation of Sophos agents or policy compliance:
High
| Alert type | Description |
|---|---|
| Failed to protect computer or server | A computer has started installation of the agent software but has not become protected for one hour. The installer that has been run on the affected computer may provide more information about the reason of the failure. |
| One or more Sophos services are missing or not running | Services are usually reported as missing or not running if installation or updating of a Sophos component has failed or not been completed. Check that you've installed Sophos software on a supported operating system, that your firewall allows access to Sophos update servers, and that you've restarted the device. For more help, see Sophos Endpoint: One or more Sophos services are missing or not running. |
Medium
| Alert type | Description |
|---|---|
| Policy non-compliance | A device may not comply with a policy for various reasons, for example because the settings have been changed on the device itself. In that case, after two hours of non-compliance, the system will raise an alert and will try to re-apply the corresponding policy. When the device is back in compliance, the alert will be automatically cleared. If re-applying fails repeatedly, it may be due to a more serious problem. In those cases, re-installation may solve the problem. |
| Peripheral detected | A removable media or peripheral device has been detected on a device monitored by Sophos Central. |
| Duplicate device detection | A duplicate device has been detected. If devices have been cloned from an image they have the same ID. Duplicate IDs can cause management issues. Duplicate devices are re-registered with a new ID. Note the following:
|