[9.165][BUG] Endpoint Protection Reporting

Hi!

Will the reporting in the Endpoint section in WebAdmin be improved?
It is really annoying that a weekly scan is still shown as an alert!

There were several promises in the last months to improve this in 9.2...

0 scorpionking over 11 years ago
This is not really fixed. The eMail part is OK, but finished scheduled scans still show up as [Alert] in WebAdmin!
Would it be possible to rename his to "[Info] Scheduled scan ..." or something like this?
----------
Sophos user, admin and reseller.
Private Setup:

XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)

UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 11 years ago in reply to scorpionking

I agree. Showing the scheduled scans as an "Alert" is no good.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 apijnappels over 11 years ago

Here's a screenshot of the "Alert" I get on the endpoints after a scheduled scan has completed.
I think too this has to be changed from "Alert" to "Info"

Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.
- Knipsel.PNG
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Michael Dunn over 11 years ago

This is what we will be doing, and will be part of 9.190:

Virus Detected - There is a "Virus Detected" Email.  There is a Alert in Webadmin.
Internal Error - No Email.  There is a Alert in Webadmin.
Scan Completed - No Email.  Nothing in Webadmin.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 11 years ago in reply to Michael Dunn

How about "out of date" status?

I can live with the changes you listed for now, but hopefully you guys will be taking the endpoint reporting a bit further in the near future (maybe after this 9.2 release sometime).

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Michael Dunn over 11 years ago

I think that Virus Patterns being out of date should appear in the same bucket as Internal Errors, there would be no email but there is an alert in WebAdmin.

Doing more would involve creating additional notification types on the Notification configuration screen, and we have decided not to do that for now.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 11 years ago in reply to Michael Dunn

Good enough. Thanks Michael!

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Astaro Beta Bot over 11 years ago

The Mantis ID #29456 is now closed.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel