[8.900][ANSWERED] Endpoint attack blocked

Hi All

I've just noticed that once I've changed the policy for the endpoint I got a

Endpoint: 1 attacks blocked

However, I am not able to find any details regarding this "block". The new policy is enabling all the possible options including (sophos live protection and Send sample file )

Can we get more information regarding the options on a different thread (sticky)?

THanks

0 wingman over 13 years ago

Today I got 1470 attacks blocked [:D]

Is this related to the reporting issues with v8.920 or is it something endpoint miss reports?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago

I am getting less attached (today only 6) with version 8.930
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago

Any updates regarding this?

Today I had 819 attacks blocked
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 12 years ago

same with version 8.940016 (less "attacks" though)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 rfarcas over 12 years ago

Hi wingman,

The attacks blocked you're seeing are the total count of events received from all endpoints for that day. Details about those events can be found on the main Endpoint Protection page(you actually have to acknowledge them) or in the Live Log.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 12 years ago

that would make sense then. I wasn't clear to me what an "attack" would be
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel