We've got Endpoint Antivirus product deployed in our business environment. End users get alerted about threats for the files they're familiar with, everything's ok here. Thing is that even though they choose action of doing nothing and select the option to not get reminded next time about the same 'threats', they still get alerted after some time.
I went thoroughly through policies but everything seems okay, I think this kind of behavior can't even be forced through policy.
What could be wrong here? Why doesn't Endpoint Antivirus remembers the action for specific files?