Hi Guys,
Have an issue with an endpoint now showing up in Sophos, tried running an update but the machine is not showing up.
I cannot re-install the agent as tamper protection has gone through already to the device, but because I cannot see it in the portal this cannot be disabled.
I have tried booting up with it on power, I have tried running update but no luck.
Kind regards
Lee
Does the computer have an identity yet?
If you look under the 'persist' folder at the client (\programdata\sophos\management communication system\endpoint\persist\ there is an endpointidentity text file which has the unique ID of the endpoint.
If you look at the Computers view in Central, i.e. https://cloud.sophos.com/manage/devices/computers/all/computers, when you click on a computer, the URL changes to something like:https://cloud.sophos.com/manage/devices/computers/fe573325-47a5-f489-aa1e-65776c2158ac/summary: The unique ID part should be the same as the endpoint. You could just log in and construct the URL as above based on the identity ID at the client if it has one.
Beyond that, the mcsclient log (\programdata\sophos\management communication system\endpoint\logs\) would be the best place to start looking for errors as it's the mcsclient.exe process that talks to Central. You should see the registration take place and the http requests.
Regards,
Jak