In Sophos Central we have devices that have Windows Firewall disabled by group policy. In the report on Sophos Central Windows Firewall Report those devices are not listed. Does Sophos only report on devices where the firewall should be on but isn't functioning (in other words errors) and excludes disabled firewalls from this report if group policy sets them to off, or should it report when firewall is disabled regardless of the policy applied?
Thanks for reaching out to the Sophos Community Forum.
The Windows Firewalls Report shows as follows from my test environment.
Let me know if you're seeing something different on your side.…
Let me know if you're seeing something different on your side.
Hi, I think this helped. I was looking for errors for the domain firewall not being active. I was looking at the "Device - No Firewall Enabled" tab expecting it to be there. Looking at the "All" tab though I see that I can get a status on all firewalls, export and then filter out. This solves my problem.