This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Defaul policy being used when it isn't supposed to be.

I have a couple machines where the 'Default' policy is being used when it isn't supposed to be.  How do I fix this, and how can I identify other machines doing this?  The console says 'same as policy' in the Policy compliance column, which I guess means it is using a valid policy ... just not the right one!

using Sophos Antivirus 9.0.5, and Enterprise console  4.0.0.2362

:4410


This thread was automatically locked due to age.
Parents
  • The antivirus 'default' policy is the one I speak of.  We started getting false positives on an app that we were scratching our heads on since we knew we had approved it.  Then we noticed one person was getting email aletrs about the false virus that wasn't supposed to.  Turns out the default policy did not list the 'approved' exe, and default also included the email address that was not in the other policy we created.   To confirm our theory, we added my email address to the default policy and reapplied.  Near as we can tell we have *nothing* using the default policy.  So if I start getting antivirus alerts in my email today, it will confirm what is going on.  Will know more in a few days.  Maybe making a change to the default policy is enough to cause everything to synch up again.  Cross fingers!

    This false positive, which not everybody has, is really the only clue about the use of the wrong policy, which is why I can't tell what other machines are using.

    :4436
Reply
  • The antivirus 'default' policy is the one I speak of.  We started getting false positives on an app that we were scratching our heads on since we knew we had approved it.  Then we noticed one person was getting email aletrs about the false virus that wasn't supposed to.  Turns out the default policy did not list the 'approved' exe, and default also included the email address that was not in the other policy we created.   To confirm our theory, we added my email address to the default policy and reapplied.  Near as we can tell we have *nothing* using the default policy.  So if I start getting antivirus alerts in my email today, it will confirm what is going on.  Will know more in a few days.  Maybe making a change to the default policy is enough to cause everything to synch up again.  Cross fingers!

    This false positive, which not everybody has, is really the only clue about the use of the wrong policy, which is why I can't tell what other machines are using.

    :4436
Children
No Data