Something changed within the last few weeks. I use several programmes to control DMX lights with UDP packets. Now i find that malicious traffic detection is silently blocking them.
Are there no log files??? there is nothing in C:\ProgramData\Sophos\Sophos Network Threat Protection\Logs
There is nothing in the web client (central) for the machine. There is nothing in general event logs.
the only reason i know this is the problem is that when i turn off that component locally, the UDP packet sending programme works. I can also get it working on freshly imaged machine with no virus scanner.
Can we have some logging please, or let me know where it is. I would expect that if something was blocked by the virus scanner, that it would LET ME KNOW IN SOME WAY, as opposed to silently failing and not being logged ANYWHERE.
FYI one of the programmes that I am using is udpsz.exe which you can download from this guy here to demonstrate yourself. http://aluigi.altervista.org/testz.htm , but it also effects some of our building automation software that runs in java.
am i missing where this logging location is for malicious traffic detection? let me know and i can look at those logs and hopefully whitelist this completely acceptable behaviour in my environment.
TO FIX: i had to create a secondary policy and apply it just to the one server who sends the UDP packets with malicious traffic detection set to off.
This thread was automatically locked due to age.
