Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

"We're checking that this computer is now safe"

Noticed that one of the machines we have is stating the message on the Sophos UI 

"We're checking that this computer is now safe. Please contact your IT administrator"

Anybody know what Sophos is actually doing here? There was no indication of a threat or malicious file found on the machine recently. Nothing stated in Sophos Central Admin Console

Recently updated to Core 2.1.2 with Endpoint Advanced 10.8.2 and Intercept X 2.0.8

The message has been there for several hours at this point



This thread was automatically locked due to age.
Parents Reply Children
  • It seems to me as a bit of a catch all.

    C:\Program Files\Sophos\Sophos UI\en-us.json

    Has it down as the internal names:

    "status.health.title.generic-red": "We're checking that this computer is now safe",
    "status.health.title.generic-yellow": "We're checking that this computer is now safe",

    I see you have it as yellow.  I had it once as Red due to a failed cleanup event.  Hitting the resolve link in the Events list solved it for me.

    I can only suggest looking down the list of Events for warnings and see if you find any which aren't resolved.

    Thanks,

    Jak