In the Sophos Central Report Generator (IPS Report Template), there is a column for Log Subtype we noticed that most of the values are "drop" however there are a few rows with values "detect". Does this mean did Sophos IPS allowed this traffic? If ever, where can we configure the IPS so that all detected malicious activity will be dropped?
This thread was automatically locked due to age.