A blue "filter" icon is displayed In the SafeGuard Enterprise Management Center.
Known to apply to the following Sophos product(s) and version(s)
SafeGuard Management Center / Local Policy Editor
All supported versions.
What To Do
The SafeGuard Enterprise Management Center is, by default, configured to display only 1000 objects per container.
To indicate that a filter was applied to a container (e.g. a Organizational Unit), the "blue filter" symbol is added to the icon (see screenshot below).