This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Computer alert

I had a computer in a clients Sophos central detect a PUA. I have acknowledged this alert and it is no longer showing in the Alerts dashboard. It IS however showing on the Computer object in the Computers list that there is still an Alert. When I click on the computer there is no actions available to clear the alert that is still showing.  How do I clear this alert on the computer??



This thread was automatically locked due to age.
Parents
  • Hi lincoln

    Could you share a snap of the issue and the dashboard (keep sensitive info hidden). Also you have the notification in logs then it would remain there . After the action given ,  it would allow or deny according to the alert . 

    Thanks and Regards

    Aditya Patel  | Network and Security Engineer.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • Thanks but I've sorted it out now. Apparently the actions in Sophos Central like 'clean PUA' and mark as resolved don't actually do anything on the client with the PUA. I had to actually log into the client workstation and manually remove the detected file from the C:\$recycle.bin folder and then initiate a new scan on that computer to clear the alert.

Reply
  • Thanks but I've sorted it out now. Apparently the actions in Sophos Central like 'clean PUA' and mark as resolved don't actually do anything on the client with the PUA. I had to actually log into the client workstation and manually remove the detected file from the C:\$recycle.bin folder and then initiate a new scan on that computer to clear the alert.

Children