Sophos Client Firewall: authorized application still generates 'blocked' alerts in the log
Issue
Authorizing an application in Sophos Client Firewall does not prevent alerts on that application from occuring. After trusting an application and authorizing it to launch hidden processes, an alert is still generated for that application every time it runs.
Sophos product and version
Sophos Client Firewall 1.5.3
Operating system
Microsoft Windows 2000+
What to do
Check to see if the MD5 checksum for the application is correct using a free checksum utility. If you are running multiple versions of the same program, for example, Internet Explorer version 6, 7 and 8, each version will have its own checksum.
If you do not use the checksum setting in Sophos Client Firewall, verify that the 'Report new and modified Applications' checkbox is also unchecked. (Right-click the Sophos Client Firewall icon and select Configure. Under Reporting, remove the checkmark in the 'Report new and modified Applications' check box.)
If you need more information or guidance, then please contact technical support.
- Article ID: 42913
- Created: 22 Jul 2008
- Last updated: 4 Mar 2009


