Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Subscribers 16 subscribers
  • Views 1472 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sohos Central update event didn't tally/same as agent

AzwanArif

Hi All,

Recently we deployed Sophos Central to one of our customers with relay and cache update environment. A customer reported that they're having issues with event information as above subject.

We have verified the domain and port, including agent status is in place without blocking from any proxy. We also encounter the same issue even though using training computer without any internet restriction or blocking.

Does anyone encounter the same issue before?



This thread was automatically locked due to age.
  • 0

    Thank you for reaching the community. 

    What type of event is not showing on central from the endpoint or vice versa? Was it an event about some detections? 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • 0 in reply to GlennSen

    Hi  ,

    The issue is related to agent update status. Based on the screenshot above Central reported success update on the previous day, but didn't have the latest up to date which agent check every hour.

    Does Sophos Central only will receive status from agent when new data or changes to the update folder/history as shown from McsClient log below?. Thanks

  • 0 in reply to AzwanArif

    You don't get an event in Central for each update check. That would be a little overkill and too much data to process given it's every 1hr.

    I believe you get them after transitioning from failing to working and maybe every 28 hours. It is expected and nothing to worry about.  It will tell you if there is a problem.

Unfiltered HTML