Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Subscribers 16 subscribers
  • Views 16883 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Whitelisting a program via Global Scanning Exclusions in Sophos Central?

Rich Billard

I have yet another program that Sophos is causing a false positive in cryptoguard.

Draftsight is the program.

If i add the exclusion in Global Scanning Exclusions under "File or Folder -Windows" using the path C:\Program Files\Dassault Systemes\DraftSight\bin\DraftSight.exe     and choose to be active for "Real Time and Scheduled"   should that keep Sophos from touching it at all?

 

 

thanks

 



This thread was automatically locked due to age.
Parents
  • +1

    I received this from Sophos support, put into place and appears to be working thus far.  Please note, once select, "Detected Exploits (Windows)", you may need to scroll down the list if you have multiple entries, to find the one you want.

     

    "Please try excluding this application in the Central Admin by navigating to System Settings > Global Scanning Exclusions > Add Exclusions > Detected Exploits (Windows) and selecting the cryptoguard detection.

    This should exclude the application from being detected as ransomware."

     

     

    Thanks, Everyone!

     

    James

Reply
  • +1

    I received this from Sophos support, put into place and appears to be working thus far.  Please note, once select, "Detected Exploits (Windows)", you may need to scroll down the list if you have multiple entries, to find the one you want.

     

    "Please try excluding this application in the Central Admin by navigating to System Settings > Global Scanning Exclusions > Add Exclusions > Detected Exploits (Windows) and selecting the cryptoguard detection.

    This should exclude the application from being detected as ransomware."

     

     

    Thanks, Everyone!

     

    James

Children
No Data
Unfiltered HTML