This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Intercept X Registry Keys

What are the registry keys I can use to verify my sophos is enabled and up to date? (Winodws 11)



This thread was automatically locked due to age.
Parents
  • There isn't really a supportable interface via the registry for this. Nothing that says "up to date" as such but if I had to pick something for up to date state:

    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\AutoUpdate\UpdateStatus

    Result = 0 is good and LastUpdateTime could be used to compare against the current time taking into account some window.

    The policies from Sophos Central are stored here:HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Management\Policy but as for a state that says it's working, maybe the Health status: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\Health\Status

    As I say, this could all change and I think there is going to be a new set of health state under:

    HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Management\SharedState\ 

    But it isn't fully available yet.

Reply
  • There isn't really a supportable interface via the registry for this. Nothing that says "up to date" as such but if I had to pick something for up to date state:

    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\AutoUpdate\UpdateStatus

    Result = 0 is good and LastUpdateTime could be used to compare against the current time taking into account some window.

    The policies from Sophos Central are stored here:HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Management\Policy but as for a state that says it's working, maybe the Health status: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\Health\Status

    As I say, this could all change and I think there is going to be a new set of health state under:

    HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Management\SharedState\ 

    But it isn't fully available yet.

Children
No Data