Endpoints which are upgrading to Sophos Anti-Virus 10.0.4 and have an existing Data Control policy applied which contains a file content rule, will see the Policy compliance column within the Sophos Enterprise Console change to Differs from policy.
First seen in
Sophos Anti-Virus for Windows 2000+ 10.0.4
With the new release of Sophos Anti-Virus 10.0.4 there have been improvements to the Content Control Lists. The endpoints will not receive new Content Control List until they receive the new policy. The endpoints will report to the console that they have the older list which results in the policy state of "Differs from policy".
The new Content Control Lists can more accurately detect certain personal identity data such as credit card numbers.
For more information on Content Control Lists, please see article 51976.
What To Do
Within the Enterprise Console:
- Select the computer(s) which show the policy compliance as "Differs from policy" for the data control policy.
- Right click and select "Comply with" from the list and then choose "Group Data Control Policy".
- The endpoints will then have the new configuration of the Content Control List applied.