The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article explains how to authorize or cleanup 'Potentially Unwanted Applications' (PUAs) from Sophos Cloud.
Known to apply to the following Sophos product(s) and version(s) Sophos CloudSophos Cloud Managed Endpoint
Within the Sophos Cloud identify the endpoint(s) showing the Potentially Unwanted Application alert(s). Outstanding alerts will be shown in the Action Center.
To remove a PUA
From Sophos Cloud
Note: The items selected will immediately be removed from the Action Center. If there is a problem with cleanup or further actions are required a new entry in the Action Center will appear. To confirm cleanup has been successful, the 'Events' report under 'Reports' can be checked.
From the Computer
Note: Cleanup can only be run as an administrative user.
If any problems are encountered during cleanup, click '[details]' and check for any error messages.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.