Example we have 1000 Servers and our Usage shows 1050 in Red. But so far no issues observed. Everything looks normal apart from Dashboard which shows usage exceeded alarm. Any thoughts?
Hi skyisbluescreen ,
Thank you for reaching out to the Sophos Community Forum. Can you please clarify which license has exceeded the usage limit? Intercept X Advanced with XDR is licensed per user, while Intercept X Advanced for Server with XDR is licensed per server.
Could you also check and confirm how many devices/servers are showing active under Logs & Reports? For more information, the license usage and calculation are also explained in the following article:
Sophos Central Endpoint: Information on license usage and calculation
Hi skyisbluescreen ,
Thank you for reaching out to the Sophos Community Forum. Can you please clarify which license has exceeded the usage limit? Intercept X Advanced with XDR is licensed per user, while Intercept X Advanced for Server with XDR is licensed per server.
Could you also check and confirm how many devices/servers are showing active under Logs & Reports? For more information, the license usage and calculation are also explained in the following article:
Sophos Central Endpoint: Information on license usage and calculation
If a user has logged into a device but is no longer actively using that device, it can take up to 30 days for that user-device association to release so that the device shows no assigned users.
What may also happen is if a User A normally uses Device A, but on the following day they use Device B (without anyone else using Device A), both Device A and B will remain assigned to User A.
Let me know if the following Recommended Read article helps.
- community.sophos.com/.../identifying-endpoint-license-usage
