no heartbeat from 10.5.0 Mac Endpoint on macOS Sonoma 14.0

We have one device that is using this software combination and the device is not sending heartbeat to the firewall, nor does it show correct information in Sophos Central.

No HP packets arrive from the device for IP as can be seen with tcpdump, if the user does a telnet to that IP and HB Port 8347, it appears in heartbeat.log on the firewall. Of course not successful.

In Central it does also not show the actual IP address. It shows the correct User and recent events but not the correct IP.

are there suggestions about how to fix that?

where is a heartbeat log located on MAC?

Added Tags
[edited by: Gladys at 8:03 AM (GMT -7) on 3 Oct 2023]