Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 3 subscribers
  • Views 5198 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cant make an Exception work

NewImage
Hi
I have a file that is being flagged as a PUA that I want to keep, NirCmd (nircmd.exe). I'm trying to create an exception to stop it from being flagged. 

I created 2, even uploaded a copy to the suspicious file exception .



I still get 
- Threat: Adware or PUA 'NirCmd' (of type Other) has been detected.
Status: Cleanupable
Action: Blocked
Scan type: Unknown
Type: P UA 

I finally had to just turn off PUA scanning all together. 

Is there something I'm doing wrong, or a different kind of exception needed?


This thread was automatically locked due to age.
Parents
  • 0
    Ok I said I would get back about the endpoint and wanted to check in. Here is where you would allow a file on the endpoint client. See attachment. Also did you figure it out?

    And yes I help the school IT Staff with sophos alot as well so the endpoint is kind of my area [:D]
  • 0 in reply to Michael3245
    Michael--you are missing the point.  One is supposed to be able to configure the exceptoin from the UTM; it does not currently work.  Manually configuring such an exceptoin on the Endpoint is not the answer -- the bug needs to be fixed.

    Newimage, I will report the bug to Sophos Support.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0 in reply to Michael3245
    Michael--you are missing the point.  One is supposed to be able to configure the exceptoin from the UTM; it does not currently work.  Manually configuring such an exceptoin on the Endpoint is not the answer -- the bug needs to be fixed.

    Newimage, I will report the bug to Sophos Support.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?