Application classification - local classification error

Hello Ian,

Thank you for contacting the Sophos Community.

Is this from the Sync Application Contro? If so, you can search for the App name in the searchbox of Syn Application control, and once you find the application, click Manage, and you can change the classification from there.

Regards,

Hi Emmanuel,

I did search the KBAs before posting and found nothing other than a 2 year old post of mine on a similar subject.

The application does not appear in synch control, it is from the application list when it was new in cloud applications I chose the wrong classification and wish to change it.

Ian

Thank you for the info.

Can you share a screenshot of the application? You can send it via PM if you would like.

And I believe you are referring to the New, Sanctioned, Unsanctioned, and Tolerated classification, correct?

Regards,

Thank you for the info.

Can you share a screenshot of the application? You can send it via PM if you would like.

And I believe you are referring to the New, Sanctioned, Unsanctioned, and Tolerated classification, correct?

Regards,

Hi Emmanuel,

you are correct. I am not sure it is an issue anymore because I am not seeing many failed connections. I was seeing hundreds a day. I think the issue stopped after I restored some IP address blocks I removed while cleaning up firewall rules. It is now blocked at IP address level rather than application level which only works until I a new IP address is used.. Though being able to change Application local classifications would be good to have documented.

Ian

Hello Ian,

Thank you for the clarification.

The only way I know you can change it would be if you go to Protect > Applications > Cloud Applications and change the date to maybe last month to today, and it’ll show some classified apps; then you can click Classify and change the class.

Other than that I am not sure if after you have saved an application from the Syn App Control you can actually change it; I would need to check internally.

Regards,