This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Anti virus is prompting theta the current website is blocked.

So i came across an incident where a user has Sophos Fat client installed on his windows 7 pc, Which is managed by Sophos enterprise console.

every time the user accesses a web site, The AV shows a notification telling that "Website is blocked", How ever i checked the AV policy, Web control policy looks like

policy is ok. Even though it shows as blocked the user is able to access the website.

It occurs only to this pc, AV shows this notification even when accessing Google maps.

Have re-installed the sophos fat client and rebooted the pc, no luck.

There is no similar incident in sophos community.

Can somebody help me.

This thread was automatically locked due to age.

Parents

0 DianneY over 4 years ago

Hello THILAK KR

Please see if this article helps. You might also want to investigate the Events in Sophos Endpoint to see what specific URL is being blocked, and maybe why this is being loaded in the pages that the user is visiting.
Cancel
Vote Up 0 Vote Down

Cancel
0 THILAK KR over 4 years ago in reply to DianneY

Hi Dianney,

Had a call with Sophos regarding the same, They and I feel that Its a malicious browser.

User is able to access seamlessly on other browser.

Also, Whatever website we browse, Chrome seems to be downloading additional files which are then been quarantined by sophos AV.
Cancel
Vote Up 0 Vote Down

Cancel
0 DianneY over 4 years ago in reply to THILAK KR

See if this machine uses some sort of Google Chrome Updater, such as Google Omaha, which was referenced in this post (with a somewhat similar symptom as what you're seeing).

Otherwise, maybe reinstalling Chrome helps?
Cancel
Vote Up 0 Vote Down

Cancel
0 THILAK KR over 4 years ago in reply to DianneY

I had uploaded the files which were downloaded by Chrome to sophos, They all turned up malicious. Even chrome.exe was malicious.

Have put the pc for re-imaging.

Thanks for the support.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 THILAK KR over 4 years ago in reply to DianneY

I had uploaded the files which were downloaded by Chrome to sophos, They all turned up malicious. Even chrome.exe was malicious.

Have put the pc for re-imaging.

Thanks for the support.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data