Differs from policy - Exploit Prevention

Question

Hi Community, 
 
 we are using Sophos Enterprise Console V 5.5.0 on Windows Server 2016. 
 On Clients we use Sophos Endpoint V 10.7.2.3.3692.1 
 Since we rolled out Exploit Prevention component, we have multipe entries about clientcomputers differs from polcy (most of them regarding exploit prevention policy) at Enterprise Console. 
 
 If i force policy conformitation , the clientcomputers which "differs from policy" are "confirm with policy" after a while they fall back to "differs from policy" 
 
 These Clientcomputers are online most of the time. 
 
 Is there a way to troubleshoot this problem?

QC · Accepted Answer

Hello Thoms0n , 
 it could be the issue described in Endpoints report a policy compliance issue for the exploit prevention component after 3.6.9 Sophos Exploit prevention release , SEC is mentioned under Further information . 
 Christian