This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Force Policy Update

Noticed recently that there does not seem to be an option in Central to force a Policy update for a user/computer.

This would be very beneficial when making changes that need to be made ASAP rather than when the next scheduled sync takes place.

For example, recently added a new application to the "Allow" list and need the workstation to pull this new policy immediately. I don't see how this can be done from Central.

I realize this can be done on the workstation via the Sophos App but not very effective as a MSP working from Central.

Anyone else have this issue or is there something that I am missing?

Thanks!



This thread was automatically locked due to age.
Parents
  • Hi,

    If there is an outstanding "command" for the client to act on, it should pick it up within a maximum of 20 seconds.  As MCS client service on the endpoint polls for new commands at this interval. 

    I would initially check the MCSClient log: https://community.sophos.com/kb/119626 to see if there are issues connecting to the cloud APIs.  The next step would be in the Sophos MCS Agent log to see if it has the message and able to apply it to the managed component.

    Regards,

    Jak

  • Thanks Jak,

    I ask because there have been times that some policy changes seem to take 5 to 15 minutes before it is recognized by the client. In particular, a recent Application Control policy was changed and it took about 15 minutes and a manual sync initiated at the client before the application would be allowed to run.

    It seems that there are times in Sophos Central that a "Update" button is present and other times it is simply not there. Is this by design?

    Kyle

Reply
  • Thanks Jak,

    I ask because there have been times that some policy changes seem to take 5 to 15 minutes before it is recognized by the client. In particular, a recent Application Control policy was changed and it took about 15 minutes and a manual sync initiated at the client before the application would be allowed to run.

    It seems that there are times in Sophos Central that a "Update" button is present and other times it is simply not there. Is this by design?

    Kyle

Children