Mobile Threat Defense device status
The Mobile Threat Defense status of a device reported by Sophos Mobile to Intune is determined by the Sophos Intercept X for Mobile status.
The table shows the relationship between the Sophos Intercept X for Mobile status (Intercept X status), the Mobile Threat Defense status reported to Intune (MTD status), and the resulting compliance status of the device in Intune (Compliance status).
|Intercept X status||MTD status||Compliance status|
|Sophos Intercept X for Mobile not managed by Sophos Mobile.|| ||Non-compliant|
|Sophos Intercept X for Mobile managed by Sophos Mobile. No scan performed.|| ||Non-compliant|
|Device scanned and no malicious apps detected.|| ||Compliant|
|Malicious apps detected or device is rooted (Android) or jailbroken (iOS).|| ||As per compliance policy|
|Device not synced with the server for longer than the maximum sync gap defined in a Sophos Mobile compliance policy.|| ||Non-compliant|
For details on the MTD status values, see the Microsoft Graph API reference.