Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 3114 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Worthless Device Control notifications. TONS!

Azurus

This has been happening since day one. I have tried to fix this with no success, but I think I may be doing something wrong. I've tried to just put up with it, but I'm getting pretty fed up at this point.

My job requires me monitor many things throughout the day, and Sophos Endpoint and Control is one of the things I get notifications for.

I have a folder in my inbox labeled "Sophos", and right now it has 1731 unread emails in it that are all worthless device control events having to do with CD-ROM or DVD????  Specifically they read...

A device control event occurred on the machine XXXXX when user XXXXXXXX was logged on.

Device control successfully restarted device: device=IDE\CDROMTSSTCORP_DVD-ROM_TS-H353B______________blah blah blah.

I get between 500 and over 1000 of these per day. They make it impossible for me to provide any worth to the actual USEFUL notifications, like when someone plugs in a USB device, etc.

I have tried to get rid of these messages using information located here but with no success: http://www.sophos.com/support/knowledgebase/article/35958.html

If someone would be so kind of help me with a solution to this issue, it would save me from making an angry call to support.

Thanks!

:12841


This thread was automatically locked due to age.
Parents
  • 0

    I agree, it's worth changing in ver. 10. Even as it stands now, I do like the Device Control feature. In my environment, USB thumb drives and cell phones are not allowed to be plugged into any equipment here whatsoever. Sophos is able to do a really good job blocking these devices, alerting me of who plugged it in, and where, and what type of device it was. I also like the ability to make exceptions based on the deviceID.

    But these notifications about "Successful device restarts" really should be turned off by default. THese should be things that if you do want, you could turn on by maybe adding a reg key or running a SQL query. I shouldn't have to run a SQL query to try to filter them off. I'm not sure who would want to know every time the device control is able to successful run, I'd only like to know if it fails.

    :12949
Reply
  • 0

    I agree, it's worth changing in ver. 10. Even as it stands now, I do like the Device Control feature. In my environment, USB thumb drives and cell phones are not allowed to be plugged into any equipment here whatsoever. Sophos is able to do a really good job blocking these devices, alerting me of who plugged it in, and where, and what type of device it was. I also like the ability to make exceptions based on the deviceID.

    But these notifications about "Successful device restarts" really should be turned off by default. THese should be things that if you do want, you could turn on by maybe adding a reg key or running a SQL query. I shouldn't have to run a SQL query to try to filter them off. I'm not sure who would want to know every time the device control is able to successful run, I'd only like to know if it fails.

    :12949
Children
No Data