Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Lockdown Exceptions

So we have locked down a handful of out server - Occasionally I need to run executables from a UNC path.

Since UNC paths are not supports, I make a filename exception to the Lockdown policy we have for the server group that the server endpoint lives in.

I run an update on the endpoint by going to the endpoint, opening the Sophos local console, going to about and then clicking Update Now

The policy never comes down and I am unable to run the filenames that I enter into the exception. Is there something I am doing wrong?



This thread was automatically locked due to age.
Parents
  • Hello Steve Kuzma,

    UNC paths are not supported
    can't say if this is the case as I'm not a Central user (the Lockdown FAQ article mentions shares for blocking files/folders so I'd assume UNC paths are valid but this is just an assumption).
    the policy never comes down
    Anyway, the second and third paragraph under What to do in How to understand and troubleshoot policy compliance state that it shouldn't take excessively long for an endpoint to comply with a changed policy. It should not require local action, furthermore Update Now is solely for detection data and software updates and not related to management/policies. The article also tells you how to proceed if policies aren't received as expected.

    Christian

Reply
  • Hello Steve Kuzma,

    UNC paths are not supported
    can't say if this is the case as I'm not a Central user (the Lockdown FAQ article mentions shares for blocking files/folders so I'd assume UNC paths are valid but this is just an assumption).
    the policy never comes down
    Anyway, the second and third paragraph under What to do in How to understand and troubleshoot policy compliance state that it shouldn't take excessively long for an endpoint to comply with a changed policy. It should not require local action, furthermore Update Now is solely for detection data and software updates and not related to management/policies. The article also tells you how to proceed if policies aren't received as expected.

    Christian

Children
No Data