Knowledge Base

Bitte , um Beiträge und Themen zu erstellen.

Heartbeat delay missing

https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/cliGuide/concepts/SystemCommands.html#concept_udr_4z5_k5__section_tyn_bdl_t4b

 

Set the behavior of heartbeat reports to Sophos Central.

Syntax

Description

delay-missing-heartbeat-detection set NUMERICAL VALUE in seconds.

Range: 30 to 285 in multiples of 15

suppress-missing-heartbeat-to-central set NUMERICAL VALUE in seconds.

Range: 0 to 120.

Sets the time to wait before moving the endpoint to missing heartbeat status. Use this when there are frequent adapter changes (for example, when switching between Wi-Fi & LAN connections).

Default: 60 seconds.

Sets the time to wait before Sophos Firewall reports the missing heartbeat status to Sophos Central. We recommend using this option if endpoints are expected to frequently sleep, hibernate, shutdown, or wake up.

Default: 0 seconds

 

You can control the behavior of Sophos Firewall when it detects an endpoint has a missing heartbeat by either suppressing or delaying the reporting. This allows the endpoint to resume the heartbeat with Sophos Firewall before any action is taken that could disrupt a user’s work.

This is configured in the console.

The delay missing heartbeat detection command sets the time to wait before moving the endpoint to missing heartbeat status. Use this when there are frequent adapter changes; for example, when switching between wireless and wired connections. The default setting is 60 seconds, and it can be set to between 30 and 285 seconds in multiples of 15.

The suppress missing heartbeat detection command sets the time to wait before Sophos
Firewall reports the missing heartbeat status to Sophos Central. We recommend using this option if endpoints are expected to frequently sleep, hibernate, shutdown, or wake up. The default setting is 0 seconds, and it can be set to between 0 and 120 seconds.

Use when there are frequent adapter changes

system synchronized-security delay-missing-heartbeat-detection show

system synchronized-security delay-missing-heartbeat-detection set seconds 120

Use when there are frequent system state changes

system synchronized-security suppress-missing-heartbeat-to-central show

system synchronized-security suppress-missing-heartbeat-to-central set seconds 60