What actually throws a "Real Time Detection Disabled" high alert?

I was told by support that this can be tripped on shutdown/restart if the services stop out-of-order.  Essentially if the MCS Agent stops *after* the other services, it reads it as an error state and sends the alert.  They told me this was on the radar to be fixed, but that was about a year ago now.

Yeah, it'd be nice if that was cleared up.  It's odd when I have a boss asking after it and I am not able to explain why there are high alerts on the dashboard.  I kinda figured it was an out of order service stop or maybe when the machine is receiving a major Sophos update. 

One more for this too.

These Alerts regulalrly come up and Look like False Positives.

When you go into central on the Customer Portal the machine are OK

I am also seeing the same....it's a pain in the backside ringing users to get onto their machines to check only to find everything is running as it should. As i've said before, overhead is too big trying to keep on top of clients!

I guess this hasn't been fixed? I'm sseing this on one machine currently. All services are up and running.

This is happening to me too...

Hi CharmingYeti,

As mentioned in the Thread, this is a reported issue and our team is working on it for a fix. Meanwhile, you can refer Sophos Endpoint Self Help - Services and contact support.

Hi Gowtham Mani,

Do you have an ETA on when this fix will be released?

Thanks.

Hi Jay Parmar,

I do not have any ETA as the team is working on it. If there are any new developments, I will keep the thread updated.

Thanks Gowtham.