Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 11 subscribers
  • Views 13418 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Controlled application allowed sometimes, blocked others

Matt Voss

Hello

I have been given the task of monitoring our Sophos Central and determining further configurations.

I have noticed that we have 7-Zip blocked under application control (as well as a few others like  Toolbars, Unity Web Apps, Unity Web Players, Eclipse IDE , etc) and sometimes they are blocked and sometimes they are not..

 

Any ideas?

 

Thanks,

Matt



This thread was automatically locked due to age.
Parents
  • 0

    I have recently noticed this as well.  Strangely, however, The app may still be blocked even if I see the "Controlled application allowed" notice.  For instance we have Windows Store blocked.  After scanning a system it will detect the app and say "Controlled application allowed: Microsoft Store App (Download manager)".  I'll go to that system try to open the Store and it Sophos will block it as I wanted. 

  • 0 in reply to Brian Downer

    I have found out that most of these are "ghost" detections.
    Which means Sophos found the file for this app on an On-Demand scans.

    My fix for this is to go the policy, settings, turn off "Detect conntrolled application during scheduled and on-demand scans"

    You will stop receiving these "ghost" detections after a couple of hours.

Reply
  • 0 in reply to Brian Downer

    I have found out that most of these are "ghost" detections.
    Which means Sophos found the file for this app on an On-Demand scans.

    My fix for this is to go the policy, settings, turn off "Detect conntrolled application during scheduled and on-demand scans"

    You will stop receiving these "ghost" detections after a couple of hours.

Children
No Data
Unfiltered HTML