ATP alert

Hello there,

Good day and thanks for reaching out to Sophos Community and hope you are well. 

Kindly make sure that your ATP configuration is set to Log and Drop: https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/AdvancedProtection/index.html#advanced-threat-protection-atp

Then you may perform a scan and cleanup on the possibly infected end machine that has been detected by ATP

But if you believe this to be a false positive, you may configure an exception but please take necessary caution in doing so. 

Hope this helps. Have a nice day and thank you for choosing Sophos.

Cheers,

Hello there,

Good day and thanks for reaching out to Sophos Community and hope you are well. 

Kindly make sure that your ATP configuration is set to Log and Drop: https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/AdvancedProtection/index.html#advanced-threat-protection-atp

Then you may perform a scan and cleanup on the possibly infected end machine that has been detected by ATP

But if you believe this to be a false positive, you may configure an exception but please take necessary caution in doing so. 

Hope this helps. Have a nice day and thank you for choosing Sophos.

Cheers,