Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 2946 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application Control - Differs from policy

ash

Is there a way to find out how a machine is reporting back as "differs from policy" on application control?

When I look at the details of my machine in the console it hasn't detected an application in quite some time .. yet it says I differ from policy.

I had a look in C:\ProgramData\Sophos\Remote Management System\3\Agent\Logs at my latest log, and it showed me some applications that I needed to authorize in the AV & HIPS policy .. but returned the same list for policy and config with "APPCConfig (Different)"

Does it keep historical data when making the comparrison?? So if I had an application that once made me differ will that be reported on forever?? Or is there a way to clear that out and acknowledge it.

Im struggling to get my console looking good and reports into order

:430


This thread was automatically locked due to age.
Parents
  • 0

    I faced this issue at a client end and this is due to Sophos not registering properly on the client machine registry.

    What I did:

    -I uninstalled sophos from Add/Remove

    -Cleaned the registry entry (take a backup before doing this) with all sophos did it manually pressing F3 continuously.

    -Deleted all folders named Sophos.

    -Restarted the machine and reinstalled the Sophos AV and it took the current one and working properly till now. Faced in 5PC and took half day of my job to do the process

    Regards

    Baig Frioz

    :1922
Reply
  • 0

    I faced this issue at a client end and this is due to Sophos not registering properly on the client machine registry.

    What I did:

    -I uninstalled sophos from Add/Remove

    -Cleaned the registry entry (take a backup before doing this) with all sophos did it manually pressing F3 continuously.

    -Deleted all folders named Sophos.

    -Restarted the machine and reinstalled the Sophos AV and it took the current one and working properly till now. Faced in 5PC and took half day of my job to do the process

    Regards

    Baig Frioz

    :1922
Children
No Data
Unfiltered HTML