Sophos Client Firewall 9.5

Hi,

I upgraded Sophos suite from 7.5 to 9.5 at the end of February and have noticed Client Firewall is acting differently from what I expect.

Every time Firewall detects a new application or modified application, it asks how I handle those applications, add checksum, replace checksum or block.

When I select either add or replace, it keeps prompting until I select block. In the result the application is blocked and won’’’’t run until I create a new rule onSEC.

(View à Firewall Events… à Create a rule)

My question is this behavior is what 9.5 was designed or my firewall policy is missing something.

If I missed something, how can I fix this? I want to Firewall not to block an application when users select add or replace checksum. In 7.5, Firewall worked that way.

Thanks for your help in advance!