PLEASE READ Advisory: Kernel memory issue affecting multiple OS (aka F**CKWIT, KAISER, KPTI, Meltdown & Spectre) for the latest updates.
Support may ask you to locate the unique computer ID from Sophos Central Admin in order to trace messages for a given computer. This article explains how to determine the Endpoint ID of a computer managed by Sophos Central or UTM.
The following sections are covered:
Applies to the following Sophos products and versions UTM Managed Endpoint (Windows 2000+)Sophos Central Admin Sophos Central Managed Endpoint Sophos Central Managed Server
C:\Documents And Settings\All Users\Application data\Sophos\Management Communication System\Endpoint\Persist
C:\ProgramData\Sophos\Management Communication System\Endpoint\Persist
Open terminal and run the command:
cat /opt/sophos-av/log/sophosav/mcs_envelope.log | grep SAV/endpoint
This will give you an output including the Endpoint ID. For example:
2017-09-07 08:35:50,477: GET/commands/applications/SHS;NTP;ALC;AGENT;APPSPROXY;HBT;SAV/endpoint/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
where xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx is the machine's unique ID.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.
This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.