Currently running UTM 9.4 and testing out Sandstorm functions.
Bit odd at the moment as everything seemed to be working but the last 2 days it seems to have stopped. The advanced protection screen shows 8 Suspicious files but none have been send for analasys.
I had an email from the admin lady this morning asking if an email she had received was legitimate. I sent a sample of the document she received to the labs manually and it has come back as malicious and a pattern file is being created. Why did the UTM not send this to sandbox even though it was marked as suspicious?
No config has been changed. A little worrying that stuff like this getting through!
This thread was automatically locked due to age.
