>>Verify whether crash dump files are being generated after each unexpected reboot. Check for the presence of MEMORY.DMP or Minidump files on the Windows 11 device.
>>Confirm and document whether the reboot behavior started after the installation of SonicWall Endpoint Security version 1.0.33. Use this information as the baseline for internal reboot and BSOD troubleshooting.
>>Review the SVC logs and identify the exact timestamp corresponding to the most recent reboot event.
>>Check the logs for any errors, especially the following message observed in version 1.0.33:
>>Verify that the device status remains continuously Online and does not transition to Offline or any other state.
>>Ensure that the device time and status are synchronized and match the information displayed in the cloud console.
>>Review Resource Monitor and check for high memory utilization or any abnormal resource consumption.
>>Look for the following log entries in the Theron logs and note their timestamps if found:

This mean the system was reboot.