I'm finding a few endpoints showing in the plugin with Health Status "suspicious". When I check Sophos Central everything is fine. This is generating a ticket in our PSA system and wasting tech time.
Digging deeper, the LastSeenAt field in the plugin_sophos_central_cd_endpoints table is not current, and doesn't update after a sync. I assume this is why the plugin is noting the status as suspicious. ThreatsStatus and ServicesStatus are both 'good'.
The LastDataSync field on the plugin_sophos_central_cd_endpoints table shows the current date, and updates if I do a manual sync, so something is syncing.
Apart from this and also being very slow with 2000+ endpoints, the plugin is working okay
Any ideas on the health status isse?
Thank you for reaching us, we have raised this one with our internal team, and in parallel, I would like to ask your assistance if you can raise a case ID for the said issue you were facing.
I am also experiencing this same issue with 6000+ agents.
Thank you for reaching us. to further investigate this issue. can you raise a case ID and share it with us?