HELP! Our site is BLOCKED? 100% FALSE FLAG - PLEASE UNBLOCK

You can submit your URL here: https://support.sophos.com/support/s/filesubmission?language=en_US

Wow really quick response! Thank you! I'll do that.

Do you use SOPHOS as well? You can add a local exclusion while it is getting processed too.

Thanks! It's been about 10 days that I submitted my request to unblock here https://support.sophos.com/support/s/filesubmission?language=en_US but have not received any response. Do you know how long does it usually take? Thanks for your help!

Hi Ney Lanjewar,

The policy test on my LAB firewall shows the website is allowed and is categorized as General Business. Would it be possible for you to get the screenshot of the warning from the user and find out if it's been blocked by the Sophos Endpoint protection. 

Reference screenshot: 

Thanks,

Hi Ney Lanjewar,

The policy test on my LAB firewall shows the website is allowed and is categorized as General Business. Would it be possible for you to get the screenshot of the warning from the user and find out if it's been blocked by the Sophos Endpoint protection. 

Reference screenshot: 

Thanks,

Upon validating, the website is already accessible on the endpoint level. 

 
Kindly validate and let us know if the issue still persists. 
 

Hi, thank you so much for looking into this. 

It shows on the VirusTotal tool that Sophos is flagging this domain as malicious. 

Domain: www.groundzero360.org

VirusTotal Scan Result Link: www.virustotal.com/.../detection

Thank you for letting us know. By any chance have you already submitted a  URL re-assessment through our sample submission portal? If Yes, Please please share the case ID which is being created. if not? please proceed with submitting a URL reassessment request to change its category. 

Hi! Hope you are doing well! 

I didn't have any Case IDs so I went ahead and submitted again for a URL re-assessment to Endpoint Protection (Managed by Sophos Central) and to Sophos Web Gateway (Managed by Sophos Central). 

In both cases, after submission, it showed a generic confirmation as shown below without any Case IDs or reference number. 

Is there anything else I can do?

Also is it enough that I have submitted only to Endpoint Protection (Managed by Sophos Central) and to Sophos Web Gateway (Managed by Sophos Central)? Should I be submitting to any other of Sophos' Products/Services (shown below) for re-assessment?

Thank you for your help! 

Ney

Hello there,

I checked internally and it doesn't seem like the category has been updated in all of the products, I will follow up internally with Labs to change the category in the rest of the products.

Please follow up on Monday if the site is still classified incorrectly.

Regards,

Hi! 

Hope you are doing well! 

Just wanted to follow up if the site classification has been corrected in the remaining of the products? 

Thanks!

Hello Ney,

Thank you for the follow-up.

Yes, it has been updated on the remaining products.

You need to rescan the site on Virus Total, if you use the link on this post, it would show as Malware but doing a new rescan would show now also as Clean

Regards,