Issue


Sophos erroneously detects malware in a valid application, and removes it. Commonly this can be applications such as Gigasoft's Backup Manager. You will need to add a Sophos allow rule for this application and reinstate the application. It is recommended that if this affects multiple sites, that you work through the Sophos portion on all sites, and then use RMM to automate this (if possible) in bulk across all of your sites with one job to make this a quick/efficient fix.



Process
Remediating Sophos Central


1. Login to the Sophos Central Admin Console
2.  Access the you device's details, e.g. Devices | Servers | Device Name:



3. Find the detection event for your application, and click the details link:



4. Allow the application by path, set it to 'Application used by us and some other organisations' with the comment of 'Gigasoft backup manager, which is used to backup various applications and file, and is vital to the organisation.', and click allow:





Reinstalling the Application
You will now need to reinstall the application on all affected servers.