Thread Info
Options
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to setup scheduled scan for Workgroup PCs through Enterprise Console

yLim

Currently I have 2 workgroup PC in my enterprise console.

The default Policy can be applied to the workgroup PCs, however, if I setup the scheduled scan (which under the Anti-virus and HIPS), it will display warning message "Differs from policy".

I have other computers from different domains. And are work well with the scheduled scan (display "Same as policy").

How should I address this issue? Kindly help. Thank you.

Enterprise Console version : 4.5.0.9

Sophos Endpoint Security and Data Protection version : 9.5

:4514


This thread was automatically locked due to age.
  • 0

    Hello yLim,

    are the workgroup clients using the Default Anti-virus and HIPS policy (and the other computers a "custom" policy)? And you are modifying the Default policy? Just asking 'cause I don't use the Default policy in any group.

    One way to find out why the policies differ is to enable verbose logging (forget the part about SDU). You'll find the logs in [%ALLUSERSPROFILE%\Application Data|%PROGRAMDATA%]\Sophos\Remote Management System\3\Agent\Logs.

    HTH

    Christian

    :4520
    • 0

      I have joined them into Domain and it still having problem in updating the policy.

      I duplicate the "Default" policy and add the scheduled scan. Once the policy is with scheduled scan, it will have problem in updating the policy ("Differ from policy").

      It has no problem in updating the virus definition.

      :4537
      • 0

        I dont see anything that is related to "differ from policy".

        Please guide. Any keywords i can see?

        :4540
        • 0

          Guess it's similar for all types of policies. Markers are something like: Client-side comparison result: DIFFERENT, --==Policy==-- ,  --==Config==--. The logs are named Agent-YYYYMMDD-hhmmss.log. If possible open the GUI on the client and look whether there are any scans defined.

          Christian

          :4541
          Unfiltered HTML