On the Enterprise console, under the "Status" tab | "Policy compliance" column, one or more clients report their status to the Console as "differs from policy".
Known to apply to the following Sophos product(s) and version(s)
Sophos Enterprise Manager 4.7.0
Enterprise Console 4.7.0
Enterprise Console 4.5.0
There are various reasons for the "Policy compliance" column to show as "Differs from policy". One or more sub-policies are not compliant.
What to do
You need to locate which type of policy (Updating, Anti-Virus & HIPs, Firewall, etc.) is actually differing. On the Enterprise console select each of the following tabs and check if the the value of the policy column is showing as differing.