This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sandstorm blocking downloads even though I don't have a license

I am a Home license user for Sophos UTM 9. I know this does not come with a license for Sandstorm, but it seems like sandstorm is still blocking downloads.

How can I disable this? I have looked in the antivirus settings and the sandstorm box is unchecked and greyed out.

This thread was automatically locked due to age.

0 sachingurung over 8 years ago

Hi,

Please navigate through Management>Licensing>Sandstrom. Check whether Sandstrom is licensed or not.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 8 years ago

Sandstorm is not blocking anything.

This report says that 10 files are suspicious and would have been analyzed by sandstorm. And then it says 10 files were excluded from analysis by sandstorm due to policy. In your case "due to policy" means "due to the fact you are not licensed". All files that are "Excluded by policy" are not blocked and are downloaded normally.

This report is basically saying "If you purchased a sandstorm license, we would have analyzed 10 files for you."
Cancel
Vote Up 0 Vote Down

Cancel
0 Coder68 over 8 years ago in reply to Michael Dunn

How do we see what files were suspicious? I have not turned on my 30 day trial yet, and have 1 file that was listed as suspicious. I would like to know what it thought was potentially bad.

C68
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 8 years ago in reply to Coder68

Off the top of my head I don't know what reports on the UTM will show it.

However in general Sandstorm is activated for files that are executable and for documents with executable content.
Cancel
Vote Up 0 Vote Down

Cancel
0 Coder68 over 8 years ago in reply to Michael Dunn

It would be handy to know. I am going to guess that there is a report of what was sent, and the results. It would be good for this to be emailed to us. Palo does this...
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 8 years ago in reply to Coder68

Try this:

Logging and Reporting

View Log Files

Search Log Files

Web Filtering

Search term= sandbox="1"
Cancel
Vote Up 0 Vote Down

Cancel