Q: Sophos Central - Queries for MECM - Which Sophos version are my clients running (on-prem or cloud)?

Answer

There are two queries in MECM for determining whether you are running the on-prem or cloud version of Sophos. Located in the [MECM console], under Monitoring->Overview->Queries->Application Queries, there are two queries labeled, "Sophos Cloud (Sophos Endpoint Agent)" and "Sophos On-prem (Sophos Endpoint Defense)". These self-explanatory queries will show you the computers running either of these respective Sophos clients.