Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 1 subscriber
  • Views 11540 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

acknowledgements, what actually happens?

ReintjedeSophos

I found the sophos enterprise console to be less then stellar when it comes to reporting. So when a cleanup times out and I've performed a full scan via the console on a pc,  can't really be certain whether the pc is cleaned. So what happens if I then acknowledge the alert? Does that mean that the virus is reported as safe, and thereby free to execute? Or does it simply acknowledge the alert, until the local sophos agent rereports it as a virus?

I would assume the latter is the case, but I'd like be certain about that.

Sophos Enterprise console (version: 4.0.0.2362)

cheers,

Ritch

:2366


This thread was automatically locked due to age.
Parents
  • 0

    Good morning,

    I am having exactly the same issue - and it is raising similar concerns.

    Picture the following scenario (which is what I am going through)

    1) Sophos, reports that a Virus/Spyware item has been found in a file on one of my servers

    2) I have email alerting which tells me this

    3) I log in to the Sophos Server and go to Resolve Alterts and Errors for that server

    4) The item says not cleanable, I can only click Acknowledge

    Now, from other posts/articles I have read (including this one), clicking Acknowledge simply removes the alert from view. It doesn't clean the virus out and the file is redetected at some point in the future.

    So what does this mean? Why can't I clean the files? Why didn't Sophos clean/quarantine/delete the files? (My policy says to Delete any files that the automatic cleanup can't deal with). This does make any sense?

    Can someone clear up the confusion for me because at the moment I have the belief that virus files are on my server, sophos has found them, but the only thing I'm allowed to do is ignore them......

    Thanks in advance

    :6055
Reply
  • 0

    Good morning,

    I am having exactly the same issue - and it is raising similar concerns.

    Picture the following scenario (which is what I am going through)

    1) Sophos, reports that a Virus/Spyware item has been found in a file on one of my servers

    2) I have email alerting which tells me this

    3) I log in to the Sophos Server and go to Resolve Alterts and Errors for that server

    4) The item says not cleanable, I can only click Acknowledge

    Now, from other posts/articles I have read (including this one), clicking Acknowledge simply removes the alert from view. It doesn't clean the virus out and the file is redetected at some point in the future.

    So what does this mean? Why can't I clean the files? Why didn't Sophos clean/quarantine/delete the files? (My policy says to Delete any files that the automatic cleanup can't deal with). This does make any sense?

    Can someone clear up the confusion for me because at the moment I have the belief that virus files are on my server, sophos has found them, but the only thing I'm allowed to do is ignore them......

    Thanks in advance

    :6055
Children
No Data
Unfiltered HTML