Antivirus and Security Software from Sophos

Psst, Mac user! We have a free Mac anti-virus just for you.

Online support

Product maintenance

Contact support

Support services

Resource centers

UK IT Security Events

Get the low-down on our cup winning security solutions to provide you with a defence dream team

Sophos Client Firewall: authorized application still generates 'blocked' alerts in the log

Issue
Authorizing an application in Sophos Client Firewall does not prevent alerts on that application from occuring. After trusting an application and authorizing it to launch hidden processes, an alert is still generated for that application every time it runs.

Sophos product and version
Sophos Client Firewall 1.5.3

Operating system
Microsoft Windows 2000+

What to do

Check to see if the MD5 checksum for the application is correct using a free checksum utility. If you are running multiple versions of the same program, for example, Internet Explorer version 6, 7 and 8, each version will have its own checksum.

If you do not use the checksum setting in Sophos Client Firewall, verify that the 'Report new and modified Applications' checkbox is also unchecked. (Right-click the Sophos Client Firewall icon and select Configure. Under Reporting, remove the checkmark in the 'Report new and modified Applications' check box.)

If you need more information or guidance, then please contact technical support.