Disclaimer: This information is posted as-is and the content should be referenced at your own risk
Below are possible troubleshooting steps (and KB articles for reference) to take when you see an alert in Sophos Central that says "One or more Sophos services are missing or not running" for machines running Sophos Central Endpoint. We will also have recommendations on what information to provide to Sophos Support if none of the suggestions below work or are not applicable.
What does this alert mean?
Services missing or not running usually means that a component has failed to install or update. In some cases, the Operating System or some other third party application may interfere with Sophos services, and would cause the service(s) to not start.
What to do
For Mac OS:
For Windows OS:
Additional suggestions for troubleshooting are welcome. This post may be updated periodically.