When you see computers with an At Risk status, these issues are most commonly responsible:
Agent version is not up-to-date.
Check to see if:
Computer is connected to the Internet.
When an agent cannot connect, run the Communications Test on the agent for clues. You can gather more information by using ping or trace route to collect connectivity information for heartbeat.s2.spn.com and message.s2.spn.com. Your firewall may be an obstacle. Your firewall must allow the sites that are required for the service.