Global exclusions not working

Question

Made a copy of Threat Protection added 2 exclusions 
 C:\ProgramData\SolidCast\ 
 C:\ ProgramData\SolidCast\FixedVolumeFillUtility.exe 
 
 Yet every now and then we get this: 
 Generic ML PUA detected at C:\ProgramData\SolidCast\FixedVolumeFillUtility.exe 
 Threats cleaned up. 
 
 This kills the licensing and the license program must be run again

Qoosh · Accepted Answer

Hi Frank , 
 Thanks for reaching out to the Sophos Community Forum. 
 For ML PUA detections specifically, I would suggest sending in a sample of the detected file so that our Sophos Labs team can make changes to the ML detection engine to ensure it does not get detected again. 
 In the meantime, you can add a PUA exclusion if this is a false positive . 
 You can also check the sub-keys in the following location to verify that all exclusions have been received successfully on the endpoint. - HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Management\Policy\ThreatProtection\

Global exclusions not working

Top Replies