+ Post New Thread
Results 1 to 6 of 6
Yorkshire & Humberside Grid for Learning (YHGfL) Thread, Sophos Issue 19th September in Regional Broadband Consortiums (RBC); We have had multiple reports of Sophos reporting false positives this morning. This was due to an update released by ...
  1. #1
    mwalpole's Avatar
    Join Date
    Apr 2009
    Location
    Scunthorpe
    Posts
    82
    Thank Post
    19
    Thanked 22 Times in 12 Posts
    Rep Power
    14

    Sophos Issue 19th September

    We have had multiple reports of Sophos reporting false positives this morning. This was due to an update released by Sophos which caused it to identify some of its own files as infected.

    Sophos have since pushed out an automated update which resolves the issues.

    Further information is available at YHGfL Foundation SOPHOS Repository

  2. #2

    m25man's Avatar
    Join Date
    Oct 2005
    Location
    Romford, Essex
    Posts
    1,621
    Thank Post
    49
    Thanked 451 Times in 334 Posts
    Rep Power
    137
    If you have set your Sophos AV Policy to Delete files on infection it could be a rather nasty cleanup operation...

  3. Thanks to m25man from:

    mwalpole (20th September 2012)

  4. #3
    mwalpole's Avatar
    Join Date
    Apr 2009
    Location
    Scunthorpe
    Posts
    82
    Thank Post
    19
    Thanked 22 Times in 12 Posts
    Rep Power
    14
    Hi m25man,

    We advise people to have their AV policy set to quarantine, and not to use delete, to protect from issues such as this one, as it can cause a large headache in trying to resolve this kind of problem. Hopefully most, if not all users are configured to use the quarantine option as advised by Sophos and ourselves.

    Please see page 11 on http://sophos.yhgfl.net/Downloads/Ma...c_100_heng.pdf

    Regards

    Marc

  5. #4
    clareq's Avatar
    Join Date
    Dec 2005
    Location
    Doncaster
    Posts
    693
    Thank Post
    52
    Thanked 188 Times in 124 Posts
    Rep Power
    101
    I have my sophos install set to quarantine -- now very few of my clients are updating, as the files required have been moved to quarantine. Sophos are now recommending the "deny access" option.

  6. Thanks to clareq from:

    mwalpole (20th September 2012)

  7. #5
    mwalpole's Avatar
    Join Date
    Apr 2009
    Location
    Scunthorpe
    Posts
    82
    Thank Post
    19
    Thanked 22 Times in 12 Posts
    Rep Power
    14
    Hi clareq,

    If you are having problems with getting Sophos updating correctly again, you can log a call to our YHGfL support team through your normal channels and our engineers will help you out.

    Regards

    Marc

  8. #6
    mwalpole's Avatar
    Join Date
    Apr 2009
    Location
    Scunthorpe
    Posts
    82
    Thank Post
    19
    Thanked 22 Times in 12 Posts
    Rep Power
    14
    Please note the article on the Sophos Knowledge base page has been updated with more indepth information.

    Regards

    Marc

SHARE:
+ Post New Thread

Similar Threads

  1. [Video] Low Flyby [Cockpit View] [Posted On YouTube: 19th September 2011]
    By DaveP in forum Jokes/Interweb Things
    Replies: 0
    Last Post: 26th July 2012, 06:29 AM
  2. Skype not working with webfilter (Sophos WS500 but might be similar issue with others
    By balticstar in forum Internet Related/Filtering/Firewall
    Replies: 1
    Last Post: 15th January 2011, 11:40 AM
  3. Sophos Library Issues
    By RSoP_Robbers in forum Yorkshire & Humberside Grid for Learning (YHGfL)
    Replies: 14
    Last Post: 29th June 2010, 12:19 PM
  4. Northants IT Managers' Meeting - 19th September
    By GrumbleDook in forum East Midlands Broadband Consortium (EMBC)
    Replies: 0
    Last Post: 9th September 2008, 01:01 PM
  5. Northants IT Managers' Meeting - 19th September
    By GrumbleDook in forum General Chat
    Replies: 0
    Last Post: 9th September 2008, 01:01 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •