This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

O365 ATP is still marking as opened attachments, even adding the exceptions suggested in KB

sergirt over 2 years ago

Hi,

Even following KB's:

https://support.sophos.com/support/s/article/KB-000039921?language=en_US

and

https://support.sophos.com/support/s/article/KB-000037983?language=en_US

We are haveing false positives, the ATP is detonating the attachments. Anyone is having the same issue?

thank you

This thread was automatically locked due to age.

Parents

0 Agustin Del Vento over 2 years ago

yes, this has been an issue for one of our clients.. I don't believe it was resolved and for that reason they've decided to go elsewhere with their provider for sims. I would love to know how to address this if you find out.
Cancel
Vote Up 0 Vote Down

Cancel
0 sergirt over 2 years ago in reply to Agustin Del Vento

Thanks for letting me know I'm not alone... The worst thing is that we have no answer from support.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 2 years ago in reply to sergirt

Have you had any progress with this issue?

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 Santosh Barnwal over 2 years ago in reply to BrucekConvergent

Hi sergirt, Agustin, BrucekConvergent,

I am the product manager of Sophos PhishThreat. Please reach out to me at Santosh.barnwal@sophos.com and I can have a look at your configuration.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 2 years ago in reply to Santosh Barnwal

Email Inbound...

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BrucekConvergent over 2 years ago in reply to Santosh Barnwal

Email Inbound...

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data