Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 8043 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application Control Issue

aaron9615

I finally sat down and setup application control, way cool program :) My issue is after I clear out the software that is being flagged the PC is still denoted in the Computers over event threshold under Application Control. I have tried rescanning the PC, but nothing changes. Any ideas?

:51934


This thread was automatically locked due to age.
Parents
  • 0

    I found the best way to deal with AppControl detections is by e-mail notification and kind of ignoring it in the Sophos Console. Once you receive an e-mail notification from a given endpoint the offending application should be removed/uninstalled and then you will not receive e-mails from that endpoint anymore. This system worked great over the years, but beware you will get flooded with e-mails in the beginning depending on how well your ecosystem is protected from end-users installing stuff. I had to setup a huge list of e-mail filters to deal with it. Works great though.

    :52036
Reply
  • 0

    I found the best way to deal with AppControl detections is by e-mail notification and kind of ignoring it in the Sophos Console. Once you receive an e-mail notification from a given endpoint the offending application should be removed/uninstalled and then you will not receive e-mails from that endpoint anymore. This system worked great over the years, but beware you will get flooded with e-mails in the beginning depending on how well your ecosystem is protected from end-users installing stuff. I had to setup a huge list of e-mail filters to deal with it. Works great though.

    :52036
Children
No Data