Bill Lyons

qroberts, Thank you. Ill give this a shot!

Was there ever any resolution to this? We have similar issues with our Console. We will frequently get Time outs when trying to authenticate to the console and we also have to reboot the console frequently to get Agents checking in. However its not all the time.

MichalJ, Thank you for updating this with that insight. Ill take this back and run this down with my client. Ill post back later with any follow ups.

Marcos, Here are a few of them: Type: (no type given) Cause: Suspicious Object: file:///C:/Windows/system32/en-US/IEFRAME.dll.mui Type: trojan Cause: HTML/ScrInject.B Object: file:///C:/Documents and Settings/[USERNAME REMOVED]/AppData/Local/Microsoft/Windows/Temporary Internet Files/Content.IE5/MFSTZ8NF/7b973e50[1] Type: potentially unwanted application Cause: OSX/CleanMyMac.A Object: file:///G:/$RECYCLE.BIN/S-1-5-21-2973374289-3595491005-59360181-23882/$RFW5CJ5.dmg/4.hfs

Hello! Please bare with me as this is my first post on these forums. I have some questions about ESMC v7 and its displaying of Unhandled Threats and dealing with "Resolved" threats. So for the Unhandled Threats I have setup a Dynamic Group thats using the following experssion: Active threats . Threat handled = no (I also attached a screenshot as well) This should the way I understand it show any Threats that are outstanding that have not had any "action" done to them correct? By action I mean clean, delete, block etc... The reason I ask this is that I see that if I look at my threats tab I have several more devices listed there with threats that have no Action done to them and are unresolved that do not show up in my Unhandled Threats group. As for the "Resolved" Threats question - I read that in v7 it should be possible to have the system auto resolve and clear out the threat listing by performing a scan? Is this correct? If so what type of scans qualify for this? Has anyone successfully automated this to clear out the low hanging fruit leaving only the issues that need actual attention left in the Threats tab? Any advise you guys and gals can provide would be greatly appreciated.