Access Keys:
Skip to content (Access Key - 0)

Q: Sophos Central - Queries for MECM - Which Sophos version are my clients running (on-prem or cloud)?


There are two queries in MECM for determining whether you are running the on-prem or cloud version of Sophos. Located in the [MECM console], under Monitoring->Overview->Queries->Application Queries, there are two queries labeled, "Sophos Cloud (Sophos Endpoint Agent)" and "Sophos On-prem (Sophos Endpoint Defense)". These self-explanatory queries will show you the computers running either of these respective Sophos clients.

IS&T Contributions

Documentation and information provided by IS&T staff members

Last Modified:

June 22, 2021

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
c-sophoscentral c-sophoscentral Delete
sophos sophos Delete
antivirus antivirus Delete
security security Delete
mecm mecm Delete
sccm sccm Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
This product/service is:
Easy to use
Difficult to use

This article is:
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki