all kinds of Sophos endpoint user get other users update notifications.

Question

All Sophos agent users get a notification ( Access to computer "x" denied because it may be unsafe). This notification gets recently all user, thing is that all users any users get other users notifications.

Yogalakshmi · Answer

Hi Ab Awal , Good day. Thanks for reaching out to the Sophos Community Forum. When a device triggers a red health or missing Security Heartbeat alert, all other devices on the same subnet are informed that the device is unsafe. If the unsafe device tries to access another device, you will see an event logged in Sophos Endpoint on the destination device: Access request from computer denied because it may be unsafe If a device tries to access an unsafe device, you will see an event logged in Sophos Endpoint on the source device: Access to computer denied because it may be unsafe You cannot override the rejected state on a rejected device locally. It must revert to a healthy status to allow access to or from the device. I recommend you to check this article and see if the settings are turned on. When you turn on the setting, it rejects connections to or from devices with red health or a missing Security Heartbeat. Go to My Products > General Settings > Reject Network Connections . Turn on Allow devices to reject connections from other devices with red health . Set up Exclusions if you need to. Click Save . You could also check and clear the red health status of the devices that are in red health on the subnet.