Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 1 subscriber
  • Views 11541 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

acknowledgements, what actually happens?

ReintjedeSophos

I found the sophos enterprise console to be less then stellar when it comes to reporting. So when a cleanup times out and I've performed a full scan via the console on a pc,  can't really be certain whether the pc is cleaned. So what happens if I then acknowledge the alert? Does that mean that the virus is reported as safe, and thereby free to execute? Or does it simply acknowledge the alert, until the local sophos agent rereports it as a virus?

I would assume the latter is the case, but I'd like be certain about that.

Sophos Enterprise console (version: 4.0.0.2362)

cheers,

Ritch

:2366


This thread was automatically locked due to age.
Parents
  • 0

    Hello gratwick50,

    So what does this mean? Why can't I clean the files? Why didn't Sophos clean/quarantine/delete the files? (My policy says to Delete any files that the automatic cleanup can't deal with). This does make any sense?

    I wouldn't choose Delete if cleanup fails for a server (unless you are prepared to deal with the consequences).

    Now, why doesn't it delete. "Jokes" for example are (no longer) cleanable. Files might be locked and therefore can neither be cleaned nor deleted or they might have been blocked by scan on write. For some items a full scan might be required (usually you are told). For others simple deletion might have unwanted side-effects.

    You should check the Anti-Virus log if there are any details and/or errors. Also view the threat's (BTW: could you give an example?) description and look at the Action tab. The Quarantine Manager is a tool but not the "final authority".

    Christian   

    :6077
Reply
  • 0

    Hello gratwick50,

    So what does this mean? Why can't I clean the files? Why didn't Sophos clean/quarantine/delete the files? (My policy says to Delete any files that the automatic cleanup can't deal with). This does make any sense?

    I wouldn't choose Delete if cleanup fails for a server (unless you are prepared to deal with the consequences).

    Now, why doesn't it delete. "Jokes" for example are (no longer) cleanable. Files might be locked and therefore can neither be cleaned nor deleted or they might have been blocked by scan on write. For some items a full scan might be required (usually you are told). For others simple deletion might have unwanted side-effects.

    You should check the Anti-Virus log if there are any details and/or errors. Also view the threat's (BTW: could you give an example?) description and look at the Action tab. The Quarantine Manager is a tool but not the "final authority".

    Christian   

    :6077
Children
No Data
Unfiltered HTML