The install would complete successfully but there would be no comms from the client to the server. Running the Sophos Communications report showed that there was an error, but it listed as the rather generic: The blocked and allowed sites and categories are the same. The endpoint policy compliance should change to Awaiting Policy Transfer and then change back to Same as Policy Step 3 — Test the Endpoint After the policy update has been received from the client, you can check the policy is being applied correctly. However at least with Adobe Flash you can find if you look hard enough a standard package file to install Flash. Search for sophos enterprise console is not updating: No warranties of any kind are expressed or implied.