Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 12 replies
  • Answers 1 answer
  • Subscribers 13 subscribers
  • Views 20127 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Disable PUA automatic remove.

Mat_

Hello,

 

Is there any way in Sophos Central to disable auto remove of PUA ?

I'm deploying Sophos Endpoint and I don't want Sophos to remove automaticaly some important software or file because it detects them like PUA.

 

I've already disabled malwares auto clean up, but there is no such option for PUA.

 



This thread was automatically locked due to age.
Parents
  • +1

    Hi Mat_,

    We currently do have an option in the central console to set the action taken for the PUA detections. You may choose the action to authorize or block when Sophos client detects it.

    You can also vote for the existing feature request.

  • 0 in reply to Gowtham Mani

    Hi,

    Yes I've already seen this option, this happend only with some PUAs.

    Others PUAs gets cleaned-up automatically, without any action of myself ; see this screenshot :

    So as I understand, there is no such options for disabling automatic remove of PUAs like this for malwares ?

  • 0 in reply to Mat_

    Hi Mat_,

    In these scenarios, You can create a folder exception(The application location) and exclude it from scanning. Also, add the application that is being detected as PUA under the exception.

    Note: The above suggestion is only if you are 100% sure that the application is safe to use and as a temporary workaround. The best practice would be to submit the application to Sophos Labs and get it whitelisted.

    Check community.sophos.com/.../11490How to submit a sample to Sophos Labs

  • 0 in reply to Gowtham Mani

    Hi  and thank you for your answer, but this doesn't really help me.

    I'm currently migrating from another antivirus to Sophos.

    What I want to do is disable malwares and PUAs auto remove during the migration, then whitelist some trusted software considered as PUAs or malwares by Sophos and then re-enable malwares and PUAs auto remove.

    The problem is that Sophos will detect some software as PUAs that our old antivirus didn't detect, so I can't just use PUAs exceptions from our old antivirus.

    So, does this option exists ?

Reply
  • 0 in reply to Gowtham Mani

    Hi  and thank you for your answer, but this doesn't really help me.

    I'm currently migrating from another antivirus to Sophos.

    What I want to do is disable malwares and PUAs auto remove during the migration, then whitelist some trusted software considered as PUAs or malwares by Sophos and then re-enable malwares and PUAs auto remove.

    The problem is that Sophos will detect some software as PUAs that our old antivirus didn't detect, so I can't just use PUAs exceptions from our old antivirus.

    So, does this option exists ?

Children
Unfiltered HTML
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?