This query will return all devices that don’t have the latest version of the Sophos Connect Client installed. This is a Live Discover Query for Windows devices.
SELECT name, version, install_location FROM programs WHERE name like 'Sophos Connect' and version != '2.2.90.1104'
Related: Sophos Connect v2.2 MR1 Resolves Security Vulnerabilities