Howto get rid of old entries in Endpoint protection

Hallo,

What do you get from doing the following as root at the command line?

     cc get epp endpoints

Cheers - Bob

Thanks Bob.

What I get is:

[
          'REF_EppEndWkx60s',
          'REF_EppEndX5pro',
          'REF_EppEndIna'
        ]

I know these Laptops, but they do not longer exist.

Walter, you will want to get Sophos Support to approve of you doing the following as I'm not certain there isn't something else you should do:

   cc
   epp
   endpoints@
   =[]

You should get:

   result: 1

Finally:

   exit

Cheers - Bob

Thanks Bob,

as this is only a home licence, support won't help me.

I tried your solution and got the right result.
Now after a reboot the command: cc get epp endpoints shows [] and no more endpoints are shown with

cc
   epp
   endpoints@

But on the webadmin screen nothing changed:

Endpoint Protection is active, Sophos LiveConnect is enabled, 3 endpoints, 0 thread alerts, 0 out-of-date alerts

Interesting...  What do you see with:

   cc get epp status

Cheers - Bob

{
          'av' => 1,
          'broker' => 1,
          'dc' => 1,
          'epp' => 1,
          'wc' => 0
        }

Ahhhh, just looked more closely at the first image in your opening post.  What happens if you disable Sophos Live Connect in 'Endpoint Protection >> Web Control'?

Cheers - Bob

Bob I don't understand what I shall disable.

As you can see in the first post 'Endpoint Web Control' is disabled and there is no more switch on that screen.

Sophos LiveConnect is mentioned in the description of Endpoint Web Control but no possibillity to turn on or off.

If enabling/disabling doesn't fix it, Walter, I think it's time to get Sophos Support involved.

Cheers - Bob.

Bob,
thank you for trying to help me with all your experience.

As said, it is a home licence so support won't help me.

But anyway it is not essential
It only shows a false information on the dashboard and writes a few bytes to the log every three hours that I can't interpret.

2022:04:08-01:00:44 fw epsecd[6150]: I id="424200" severity="info" sys="System" sub="epsecd" name="Parent proxy has changed re-connecting"
2022:04:08-01:00:44 fw epsecd[6150]: I id="4223" severity="info" sys="System" sub="epsecd" name="Closing socket to Sophos LiveConnect"
2022:04:08-01:00:45 fw epsecd[6150]: I id="4232" severity="info" sys="System" sub="epsecd" name="Not syncing web policy resources as web control is disabled"
2022:04:08-01:00:48 fw epsecd[6150]: I id="4231" severity="info" sys="System" sub="epsecd" name="Syncing SWC with web control global status "
2022:04:08-04:00:39 fw epsecd[6150]: I id="424200" severity="info" sys="System" sub="epsecd" name="Parent proxy has changed re-connecting"
2022:04:08-04:00:39 fw epsecd[6150]: I id="4223" severity="info" sys="System" sub="epsecd" name="Closing socket to Sophos LiveConnect"
2022:04:08-04:00:40 fw epsecd[6150]: I id="4232" severity="info" sys="System" sub="epsecd" name="Not syncing web policy resources as web control is disabled"
2022:04:08-04:00:43 fw epsecd[6150]: I id="4231" severity="info" sys="System" sub="epsecd" name="Syncing SWC with web control global status "
2022:04:08-07:00:47 fw epsecd[6150]: I id="424200" severity="info" sys="System" sub="epsecd" name="Parent proxy has changed re-connecting"
2022:04:08-07:00:47 fw epsecd[6150]: I id="4223" severity="info" sys="System" sub="epsecd" name="Closing socket to Sophos LiveConnect"
2022:04:08-07:00:48 fw epsecd[6150]: I id="4232" severity="info" sys="System" sub="epsecd" name="Not syncing web policy resources as web control is disabled"
2022:04:08-07:00:51 fw epsecd[6150]: I id="4231" severity="info" sys="System" sub="epsecd" name="Syncing SWC with web control global status "