The Sophos Central has a very handful list of apps that are in there and enterprise level we have huge number of apps that are un controlled?
How can we use Central to block more apps based on SHA or Path may be?
I have tried submitting to the LABS but some times its ignored with the reason being APP being a SPAM\ADWARE and is not eligible to be included.
Hi,
Yes, This is possible Provided that you have an InterceptX advance with EDR subscription on your account, you can use the "Block Items" option under Global settings = General = Block Items. You need to have the SHA file of each of those applications you want to add as a blocklisted application. For more information, you may refer to this documentation for further instructions. For Spam/Adware application. You don't need to add them to the blocklist since Sophos already identify their behavior as what you confirm from the above post and will block them right away.
Hi,
Yes, This is possible Provided that you have an InterceptX advance with EDR subscription on your account, you can use the "Block Items" option under Global settings = General = Block Items. You need to have the SHA file of each of those applications you want to add as a blocklisted application. For more information, you may refer to this documentation for further instructions. For Spam/Adware application. You don't need to add them to the blocklist since Sophos already identify their behavior as what you confirm from the above post and will block them right away.
I see, Yes this feature isn’t available for Intercept X license subscriptions as this is a new feature that is only available on EDR.
