Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Compliance check interval?

Detlef

Hi there,

I set up my eas proxy and it's working fine. Compliant devices can check mails, non-compliant devices cannot. But where can I define a compliance-check-intervall? My test-device is - I'm waiting for my testhardware - an old iphone 3GS with iOS 6.1.6. I could install a "forbidden app" that breaks compliance but there was no automatic compliance-check for hours. So: Where to define an intervall?

:49056


This thread was automatically locked due to age.
  • 0

    Hi Detlef,

    the compliance check is done by default every four hours. This interval can be configured in the configuration page of the Exchange ActiveSync Proxy when running the Configuration Wizard.

    Within this configuration step, you can define a value how often the compliance check is executed in minutes.

    However, you can also manually run the compliance check. To do so, go to "Compliance rules".
    In this view, press the "Check Now" button next  to the "Plus" button.

    Please note, that the compliance check is based on the information the devices have reported.
    Therefore, if the device has not synchronized since the installation of the app, the SMC server might still list the device as "compliant" if the device inventory does not list that specific application.

    Best regards

    Stefan

    :49062
    • 0

      Hi Stefan,

      thank you, I found that configuration point and set it to 30 Minutes. Then I broke the compliance on my testphone by installing an unwanted app. Then I waited and waited and nothing happened. 30 minutes passed by. Nothing. When I pressed "synchronize" in the Sophos Mobile Control app, the server realized the broken compliance and stopped the mail-sync. Hm. Why didn't it work automatically? Yes, I can check compliance by hand from the server but that's not what I need. In future we will have several hundrets of smartphones connected to the SMC so that should work automatically.

      What I saw was that my mailsync was not scheduled but set to push and manually. Now I set it to 30 minutes too. The dependencies here are a bit confusing :-).

      Greetings

      Detlef

      :49064
      • 0

        Hi Detlef,

        this sounds a bit strange.
        As I mentioned in my former post, please be aware that the SMC server does the compliance check on the information it currently has. This could influence the compliance status as well as it uses the application list the device has reported during a former synchronization. Therefore, the latest application list might not be there. Let me provide an example to clarify this:
        Let's say,  you have the compliance check configured to run every four hours.

        The last check was done at 11am.  The user now installs a new "unwanted" appliication at 1pm. iOS devices do not synchronize it's inventory automatically after an app installation. Therefore, the SMC Server does not know anything yet about that application.
        Even though it does the compliance check at 3pm.
        The device will synchronize it's inventory either once a day (the SMC server sends out a sync trigger every 24 hours by default) or if the "Synchronize" button is pressed in the SMC iOS app.

        The compliance check does not do anything directly on the device.

        I hope this helps to understand the compliance check a bit more ;-)

        Cheers

        Stefan

        :49210
        Unfiltered HTML