Hi,
With the E2 client we sometimes run into conditions where despite the file being correctly quarantined by Threat Emulation during download, the tmp file produced by the browser still appears to get detected by the Sophos Anti-Malware blade.
As the file is "swiped" away from Anti-Malware by TE the operation is deemed unsuccessful and the client goes into status of "Infected" in both SmartEndpoint and locally.
The status can be remedied by opening RemediationManagerUI & Permanently Deleting the events that caused it & rebooting the Endpoint, however is it possible to clear the infection status remotely?
Regards,
