Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Application classification - local classification error

Hi folks,

This is not  Sophos classification issue, but a local one. I have incorrectly classified an application on my XG, how do I correct tit?

Ian



This thread was automatically locked due to age.
Parents
  • Hello Ian,

    Thank you for contacting the Sophos Community.

    Is this from the Sync Application Contro? If so, you can search for the App name in the searchbox of Syn Application control, and once you find the application, click Manage, and you can change the classification from there.

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • Hi Emmanuel,

    I did search the KBAs before posting and found nothing other than a 2 year old post of mine on a similar subject.

    The application does not appear in synch control, it is from the application list when it was new in cloud applications I chose the wrong classification and wish to change it.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • Thank you for the info.

    Can you share a screenshot of the application? You can send it via PM if you would like.

    And I believe you are referring to the New, Sanctioned, Unsanctioned, and Tolerated classification, correct?

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • Hi Emmanuel,

    you are correct. I am not sure it is an issue anymore because I am not seeing many failed connections. I was seeing hundreds a day. I think the issue stopped after I restored some IP address blocks I removed while cleaning up firewall rules. It is now blocked at IP address level rather than application level which only works until I a new IP address is used.. Though being able to change Application local classifications would be good to have documented.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • Hello Ian,

    Thank you for the clarification.

    The only way I know you can change it would be if you go to Protect > Applications > Cloud Applications and change the date to maybe last month to today, and it’ll show some classified apps; then you can click Classify and change the class.

    Other than that I am not sure if after you have saved an application from the Syn App Control you can actually change it; I would need to check internally.

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Reply
  • Hello Ian,

    Thank you for the clarification.

    The only way I know you can change it would be if you go to Protect > Applications > Cloud Applications and change the date to maybe last month to today, and it’ll show some classified apps; then you can click Classify and change the class.

    Other than that I am not sure if after you have saved an application from the Syn App Control you can actually change it; I would need to check internally.

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Children
No Data