"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Endpoints which are upgrading to Sophos Anti-Virus 10.0.4 and have an existing Data Control policy applied which contains a file content rule, will see the Policy compliance column within the Sophos Enterprise Console change to Differs from policy.
First seen in Sophos Anti-Virus for Windows 2000+ 10.0.4
Cause With the new release of Sophos Anti-Virus 10.0.4 there have been improvements to the Content Control Lists. The endpoints will not receive new Content Control List until they receive the new policy. The endpoints will report to the console that they have the older list which results in the policy state of "Differs from policy".
Technical Information The new Content Control Lists can more accurately detect certain personal identity data such as credit card numbers.
For more information on Content Control Lists, please see article 51976.
Within the Enterprise Console:
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.